p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de oveleon/contao-cookiebar

Vulnerabilidades publicadas para oveleon/contao-cookiebar en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidad: 1

  1. CVE-2024-47069

    Media · CVSS 6.1EPSS 0,45%Corrección disponible

    Oveleon Cookiebar reflected Cross-site Scripting vulnerability

    Oveleon Cookie Bar is a cookie bar is for the Contao Open Source CMS and allows a visitor to define cookie & privacy settings for the website. Prior to versions 1.16.3 and 2.1.3, the `block/locale` endpoint does not properly sanitize the user-controlled `locale` input before including it in the backend's HTTP response, thereby causing reflected cross-site scripting. Versions 1.16.3 and 2.1.3 contain a patch for the vulnerability.

    oveleon/contao-cookiebar oveleon/contao-cookiebarPHP
    • Actualiza a 1.16.3
    • Actualiza a 2.1.3
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →