CVE-2019-10643

Critical

Contao 4.7 allows Use of a Key Past its Expiration Date.

mitre·CWE-287·Published 2019-04-17

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

56 chars

Contao 4.7 allows Use of a Key Past its Expiration Date.

NVDen

56 chars

Contao 4.7 allows Use of a Key Past its Expiration Date.

OSV.deven

135 chars

Security researcher Ali Razzaq has discovered that confirming an opt-in token does not invalidate previous opt-in tokens in Contao 4.7.

GHSAen

135 chars

Security researcher Ali Razzaq has discovered that confirming an opt-in token does not invalidate previous opt-in tokens in Contao 4.7.

NVDes

77 chars

Contao versión 4.7 permite el uso de una clave pasada su fecha de expiración.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.0	Primary	NVD	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H