Contao 3.x before 3.5.37, 4.4.x before 4.4.31 and 4.6.x before 4.6.11 has Incorrect Access Control.
{ "cpe": "cpe:2.3:a:contao:contao_cms:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "4.4.0" }, { "fixed": "4.4.31" }, { "introduced": "4.6.0" }, { "fixed": "4.6.11" } ], "source": "CPE_RANGE" }
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20028.json"
{ "cpe": "cpe:2.3:a:contao:contao_cms:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "3.0.0" }, { "fixed": "3.5.37" } ], "source": "CPE_RANGE" }