Vulnerability Database

296,108

Total vulnerabilities in the database

CVE-2025-57757

Impact

If a news feed contains protected news archives, their news items are not filtered and become publicly available in the RSS feed.

Patches

Update to Contao 5.3.38 or 5.6.1.

Workarounds

Do not add protected news archives to the news feed page.

For more information

If you have any questions or comments about this advisory, open an issue in contao/contao.

CVSS v3:

  • Severity: Unknown
  • Score:
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWEs:

Software From Fixed in
Composer icon contao / core-bundle 5.0.0-RC1 5.3.38
Composer icon contao / core-bundle 5.4.0-RC1 5.6.1
Composer icon contao / contao 5.0.0-RC1 5.3.38
Composer icon contao / contao 5.4.0-RC1 5.6.1