CVE-2024-45612: Contao affected by insert tag injection via canonical URL
(updated )
It is possible to inject insert tags in canonical URLs which will be replaced when the page is rendered.
References
- contao.org/en/security-advisories/insert-tag-injection-via-canonical-urls
- github.com/advisories/GHSA-2xpq-xp6c-5mgj
- github.com/contao/contao
- github.com/contao/contao/commit/1c28e9ac7a7b915134962a59681a8701a44ccbe2
- github.com/contao/contao/commit/d105224e14ddc84f27cd8802b553369decdcbe66
- github.com/contao/contao/commit/ffe05cda5310dc2bd259d1391197f3849dab8590
- github.com/contao/contao/security/advisories/GHSA-2xpq-xp6c-5mgj
- nvd.nist.gov/vuln/detail/CVE-2024-45612
Code Behaviors & Features
Detect and mitigate CVE-2024-45612 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →