Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 19:43:26 +0000 CVE-2024-45604 — Directory traversal in the file selector widget in contao/core-bundle https://cve.radiocsirt.org/vuln/cve-2024-45604 <p><strong>Affected:</strong> contao</p> <p>Contao is an Open Source CMS. In affected versions authenticated users in the back end can list files outside the document root in the file selector widget. Users are advised to update to Contao 4.13.49. There are no known workarounds for this vulnerability.</p> <p><strong>Affected:</strong> contao</p> <p>Contao is an Open Source CMS. In affected versions authenticated users in the back end can list files outside the document root in the file selector widget. Users are advised to update to Contao 4.13.49. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/cve-2024-45604