Contao: >> Contao Cms >> 4.7.0 Security Vulnerabilities
Contao before 3.5.39 and 4.x before 4.7.3 has a Weak Password Recovery Mechanism for a Forgotten Password.
CVSS Score
9.8
EPSS Score
0.003
Published
2019-04-17
Contao 4.7 allows CSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-04-17
Contao 4.7 allows Use of a Key Past its Expiration Date.
CVSS Score
9.8
EPSS Score
0.004
Published
2019-04-17