Skip to main content

CVE-2022-24899

Description

Contao is a powerful open source CMS that allows you to create professional websites and scalable web applications. In versions of Contao prior to 4.13.3 it is possible to inject code into the canonical tag. As a workaround users may disable canonical tags in the root page settings.

NVD
Severity: MEDIUM
CVE ID: CVE-2022-24899
CVSS Score: 6.1
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

GitHub, Inc.
Severity: HIGH
CVE ID: CVE-2022-24899
CVSS Score: 7.2
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Refrence: NVD MITRE

Proof Of Concept

Nuclei Templates for CVE-2022-24899

Refrence: Project Discovery GitHub

Description
Proof Of Concept