CVE-2019-10643
CRITICALContao 4.7.0-4.7.2 - Improper Authentication via Expired Key Reuse
Title source: llmDescription
Contao 4.7 allows Use of a Key Past its Expiration Date.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
https://contao.org/en/news.html
Vendor Advisory x_refsource_confirm
https://contao.org/en/news/security-vulnerability-cve-2019-10643.html
Scores
CVSS v3
9.8
EPSS
0.0125
EPSS Percentile
65.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-287
Status
published
Products (3)
contao/contao
4.7.0 - 4.7.3Packagist
contao/contao_cms
4.7.0
contao/core-bundle
4.7.0 - 4.7.3Packagist
Published
Apr 17, 2019
Tracked Since
Feb 18, 2026