Impact

Authenticated users in the back end can list files outside the document root in the file manager.

Patches

Update to Contao 4.9.40, 4.13.21 or 5.1.4.

Workarounds

None.

References

https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager

For more information

If you have any questions or comments about this advisory, open an issue in contao/contao.

References

• GHSA-fp7q-xhhw-6rj3
• https://nvd.nist.gov/vuln/detail/CVE-2023-29200
• contao/contao@6f3e705
• https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager
• https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager.html
• https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2023-29200.yaml