Contao 3.x before 3.5.37, 4.4.x before 4.4.31 and 4.6.x before 4.6.11 has Incorrect Access Control.
{ "source": "CPE_RANGE", "cpe": "cpe:2.3:a:contao:contao_cms:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "4.4.0" }, { "fixed": "4.4.31" }, { "introduced": "4.6.0" }, { "fixed": "4.6.11" } ] }
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20028.json"
{ "source": "CPE_RANGE", "cpe": "cpe:2.3:a:contao:contao_cms:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "3.0.0" }, { "fixed": "3.5.37" } ] }