Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
contao/core-bundle
main @ 7261123
7
Fixes
0
CVEs
HIGH
Peak severity
16.7%
Coverage
Highlights
Auth Bypass: 3 prior fixes. Scrutinize any change in this area.
contao/drivers/DC_Table.php: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Non-admin users could escalate privileges by assigning themselves or their groups access to the privileged 'tpl_editor' template editor, bypassing UI-level checks during user/group saves. Future changes to user and group saving logic must enforce backend-level validation.
Auth Bypass: Lack of rigorous checks allowed unauthorized access to theme content elements, necessitating a custom Security Voter to validate user privileges before granting access.
Auth Bypass: Missing ownership-based verification allowed unauthorized users to view or delete backend jobs, requiring a specialized voter implementation.