PT-2024-40504 · Contao · Contao/Core

Published 2024-05-15 · Updated 2024-05-15

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions contao/core (affected versions not specified)

Description A PHP object injection issue was identified due to untrusted data being passed to the deserialize() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-WQ43-8R5P-W3MC

Affected Products

Contao/Core

References · 6

• https://osv.dev/vulnerability/GHSA-wq43-8r5p-w3mc · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/2014-02-13.yaml · Note
• https://github.com/contao/core/issues/6695 · Note
• https://github.com/contao/core/commit/d67c46c1f1283134e3050244cfdda0ef26fa5cd4 · Note
• https://github.com/contao/core/commit/f939b5be8a0048ef779def3289e2072febef1b37 · Note
• https://contao.org/en/news/major-security-hole-found-in-contao.html · Note