All vulnerabilities

Servers and applications

GHSA-rgq4-cg48-xjxj

Insufficient CSRF protection for backend login

Severity
Low 3.5
Published
11 Nov 2026
Last changed
11 Nov 2026
Added to UpHeron
11 Nov 2026
Fixed in
5.3.54
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
ContaoServers and applications · github:contao/contao
  • From 4.0.0 before 5.3.54

References