Vulnerability Database

296,108

Total vulnerabilities in the database

CVE-2025-57756

Impact

Protected content elements that are rendered as fragments are indexed and become publicly available in the front end search.

Patches

Update to Contao 4.13.56, 5.3.38 or 5.6.1.

Workarounds

Disable the front end search.

For more information

If you have any questions or comments about this advisory, open an issue in contao/contao.

CVSS v3:

  • Severity: Unknown
  • Score:
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWEs:

Software From Fixed in
Composer icon contao / core-bundle 4.9.14 4.13.56
Composer icon contao / contao 4.9.14 4.13.56
Composer icon contao / core-bundle 5.0.0-RC1 5.3.38
Composer icon contao / core-bundle 5.4.0-RC1 5.6.1
Composer icon contao / contao 5.0.0-RC1 5.3.38
Composer icon contao / contao 5.4.0-RC1 5.6.1