CVE-2012-4383: Contao core SQL Injection Vulnerability

April 23, 2022 (updated April 25, 2024)

Contao core prior to 2.11.4 has a SQL injection vulnerability in contao-2.11.3\system\modules\backend\Ajax.php

References

github.com/advisories/GHSA-9jq2-jvwc-p52f
github.com/contao/core
github.com/contao/core/commit/2bf4fc380e19895127cbeaba62bff951a3b8e5cb
github.com/contao/core/issues/4427
nvd.nist.gov/vuln/detail/CVE-2012-4383

Code Behaviors & Features

Detect and mitigate CVE-2012-4383 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →