Threats tagged 'ghsa-5qc8-mv7f-47jm'

Contao versions 4.0.0 before 5.3.54, 5.4.0 before 5.7.17, and 6.0.0 before 6.0.6 have a path traversal vulnerability. This flaw allows content editors to read image files anywhere on the filesystem by exploiting the {{image::}} insert tag. The vulnerability arises because attackers can use percent-encoded sequences that bypass the Validator::isInsecurePath() check before decoding, enabling access to files outside the intended directory.