Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 01:32:53 +0000 CVE-2024-28235 — Contao possible cookie sharing with external domains while checking protected pages for broken links https://cve.radiocsirt.org/vuln/cve-2024-28235 <p><strong>Affected:</strong> contao</p> <p>Contao is an open source content management system. Starting in version 4.9.0 and prior to versions 4.13.40 and 5.3.4, when checking for broken links on protected pages, Contao sends the cookie header to external urls as well, the passed options for the http client are used for all requests. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a workaround, disable crawling protected pages.</p> <p><strong>Affected:</strong> contao</p> <p>Contao is an open source content management system. Starting in version 4.9.0 and prior to versions 4.13.40 and 5.3.4, when checking for broken links on protected pages, Contao sends the cookie header to external urls as well, the passed options for the http client are used for all requests. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a workaround, disable crawling protected pages.</p> https://cve.radiocsirt.org/vuln/cve-2024-28235