Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-bzd7-n1ak-mug7
Vulnerability ID VCID-bzd7-n1ak-mug7
Aliases CVE-2023-29200
GHSA-fp7q-xhhw-6rj3
Summary Contao is an open source content management system. Prior to versions 4.9.40, 4.13.21, and 5.1.4, logged in users can list arbitrary system files in the file manager by manipulating the Ajax request. However, it is not possible to read the contents of these files. Users should update to Contao 4.9.40, 4.13.21 or 5.1.4 to receive a patch. There are no known workarounds.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00578 https://api.first.org/data/v1/epss?cve=CVE-2023-29200
cvssv3.1 4.3 https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager
cvssv3.1 8.8 https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager
generic_textual HIGH https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager
ssvc Track https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager
cvssv3.1 8.8 https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager.html
generic_textual HIGH https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager.html
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-fp7q-xhhw-6rj3
cvssv3.1 8.8 https://github.com/contao/contao
generic_textual HIGH https://github.com/contao/contao
cvssv3.1 4.3 https://github.com/contao/contao/commit/6f3e705f4ff23f4419563d09d8485793569f31df
cvssv3.1 8.8 https://github.com/contao/contao/commit/6f3e705f4ff23f4419563d09d8485793569f31df
generic_textual HIGH https://github.com/contao/contao/commit/6f3e705f4ff23f4419563d09d8485793569f31df
ssvc Track https://github.com/contao/contao/commit/6f3e705f4ff23f4419563d09d8485793569f31df
cvssv3.1 4.3 https://github.com/contao/contao/security/advisories/GHSA-fp7q-xhhw-6rj3
cvssv3.1 8.8 https://github.com/contao/contao/security/advisories/GHSA-fp7q-xhhw-6rj3
cvssv3.1_qr HIGH https://github.com/contao/contao/security/advisories/GHSA-fp7q-xhhw-6rj3
generic_textual HIGH https://github.com/contao/contao/security/advisories/GHSA-fp7q-xhhw-6rj3
ssvc Track https://github.com/contao/contao/security/advisories/GHSA-fp7q-xhhw-6rj3
cvssv3.1 8.8 https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2023-29200.yaml
generic_textual HIGH https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2023-29200.yaml
cvssv3.1 8.8 https://nvd.nist.gov/vuln/detail/CVE-2023-29200
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2023-29200
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-29200
https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager.html
https://github.com/contao/contao
https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2023-29200.yaml
https://nvd.nist.gov/vuln/detail/CVE-2023-29200
6f3e705f4ff23f4419563d09d8485793569f31df https://github.com/contao/contao/commit/6f3e705f4ff23f4419563d09d8485793569f31df
directory-traversal-in-the-file-manager https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager
GHSA-fp7q-xhhw-6rj3 https://github.com/advisories/GHSA-fp7q-xhhw-6rj3
GHSA-fp7q-xhhw-6rj3 https://github.com/contao/contao/security/advisories/GHSA-fp7q-xhhw-6rj3
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-03T19:37:07Z/ Found at https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/contao/contao
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/contao/contao/commit/6f3e705f4ff23f4419563d09d8485793569f31df
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/contao/contao/commit/6f3e705f4ff23f4419563d09d8485793569f31df
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-03T19:37:07Z/ Found at https://github.com/contao/contao/commit/6f3e705f4ff23f4419563d09d8485793569f31df
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/contao/contao/security/advisories/GHSA-fp7q-xhhw-6rj3
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/contao/contao/security/advisories/GHSA-fp7q-xhhw-6rj3
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-03T19:37:07Z/ Found at https://github.com/contao/contao/security/advisories/GHSA-fp7q-xhhw-6rj3
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2023-29200.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2023-29200
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.69331
EPSS Score 0.00578
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:25:28.625629+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2023/29xxx/CVE-2023-29200.json 38.6.0