PT-2021-3934 · Contao · Contao

Leofeyer · Published 2021-08-11 · Updated 2021-08-23 · CVE-2021-37626

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Contao versions prior to 4.4.56 Contao versions prior to 4.9.18 Contao versions prior to 4.11.7

Description The issue is related to incorrect code generation management in Contao, allowing an attacker to load arbitrary PHP files via insert tags in the Contao back end. This can impact the confidentiality, integrity, and availability of protected information. Installations are only affected if they have untrusted back end users who have the rights to modify fields that are shown in the front end.

Recommendations Update to Contao 4.4.56 to resolve the issue. Update to Contao 4.9.18 to resolve the issue. Update to Contao 4.11.7 to resolve the issue. If you cannot update, disable the login for untrusted back end users as a temporary workaround.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2021-04451

CVE-2021-37626

GHSA-R6MV-PPJC-4HGR

Affected Products

Contao

References · 10

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2021-37626.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2021-37626.yaml · Exploit
• https://osv.dev/vulnerability/CVE-2021-37626 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37626 · Security Note
• https://bdu.fstec.ru/vul/2021-04451 · Security Note
• https://osv.dev/vulnerability/GHSA-r6mv-ppjc-4hgr · Vendor Advisory
• https://contao.org/en/security-advisories/php-file-inclusion-via-insert-tags.html · Vendor Advisory
• https://github.com/contao/contao/security/advisories/GHSA-r6mv-ppjc-4hgr · Note
• https://github.com/contao/contao · Note
• https://t.me/cvenotify/19173 · Telegram Post