https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 16:28:44 +0000 https://cve.radiocsirt.org/vuln/cve-2024-30262 <p><strong>Affected:</strong> contao</p> <p>Contao is an open source content management system. Prior to version 4.13.40, when a frontend member changes their password in the personal data or the password lost module, the corresponding remember-me tokens are not removed. If someone compromises an account and is able to get a remember-me token, changing the password would not be enough to reclaim control over the account. Version 4.13.40 contains a fix for the issue. As a workaround, disable &#34;Allow auto login&#34; in the login module.</p> <p><strong>Affected:</strong> contao</p> <p>Contao is an open source content management system. Prior to version 4.13.40, when a frontend member changes their password in the personal data or the password lost module, the corresponding remember-me tokens are not removed. If someone compromises an account and is able to get a remember-me token, changing the password would not be enough to reclaim control over the account. Version 4.13.40 contains a fix for the issue. As a workaround, disable &#34;Allow auto login&#34; in the login module.</p> https://cve.radiocsirt.org/vuln/cve-2024-30262