Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-04-17	CVE-2018-20028	Unspecified vulnerability in Contao CMS Contao 3.x before 3.5.37, 4.4.x before 4.4.31 and 4.6.x before 4.6.11 has Incorrect Access Control. network low complexity contao	6.5
2017-05-26	CVE-2015-0269	Path Traversal vulnerability in Contao CMS Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end" users to view files outside their file mounts or the document root via unspecified vectors. network low complexity contao CWE-22	4.3