CVE-2019-19745

Contao 4.0 through 4.8.5 allows PHP local file inclusion

published December 17, 2019

CVSS
—
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

Contao 4.0 through 4.8.5 allows PHP local file inclusion. A back end user with access to the form generator can upload arbitrary files and execute them on the server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01108 · 65.6th percentile
Published
2019-12-17T14:17Z
EPSS history
Timeline
  • 17 DEC 14:17Z
    Contao 4.0 through 4.8.5 allows PHP local file inclusion
    cvelistv5