CVE-2019-19712
Contao 4.0 through 4.8.5 has Insecure Permissions. Back end users can manipulate the details view URL to show pages and articles that have not been enabled for them.
Published: 2019-12-17 · CVSS: Unscored
Contao 4.0 through 4.8.5 has Insecure Permissions. Back end users can manipulate the details view URL to show pages and articles that have not been enabled for them.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7