Directory Traversal

2023-05-0408:01:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

contao

core-bundle

directory traversal

dc_folder.php

file manager

0.001 Low

EPSS

Percentile

45.7%

JSON

contao/contao and contao/core-bundle are vulnerable to Directory Traversal. The vulnerability exists in DC_Folder.php which allows an attacker to list files outside the document root in the file manager.

CPENameOperatorVersion
contao/contaole4.13.20
contao/contaole5.1.3
contao/contaole4.9.39
contao/core-bundlele4.13.20
contao/core-bundlele5.1.3
contao/core-bundlele4.9.39
contao/contaole4.13.20
contao/contaole5.1.3
contao/contaole4.9.39
contao/core-bundlele4.13.20

Name	Operator	Version
contao/contao	le	4.13.20
contao/contao	le	5.1.3
contao/contao	le	4.9.39
contao/core-bundle	le	4.13.20
contao/core-bundle	le	5.1.3
contao/core-bundle	le	4.9.39
contao/contao	le	4.13.20
contao/contao	le	5.1.3
contao/contao	le	4.9.39
contao/core-bundle	le	4.13.20