Skip to content

CVE record · 1 source

CVE-2026-107844

CVSS 5.3

Contao is an Open Source CMS.

Vendor: Canonical
Product: canonical
CVSS: 5.3

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

3

CVE NVD 22d ago

Contao is an Open Source CMS.

Contao is an Open Source CMS. From version 5.0.0 until 5.3.50 and 5.7.12, ImagesController joins the user-controlled {path} parameter to the configured image target directory with Path::join() but does not use Path::isBasePath()…

CVSS 5.3 CVE-2026-107844 Canonical