{"api_version":"1","generated_at":"2026-07-23T12:31:27+00:00","cve":"CVE-2022-24899","urls":{"html":"https://cve.report/CVE-2022-24899","api":"https://cve.report/api/cve/CVE-2022-24899.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2022-24899","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-24899"},"summary":{"title":"CVE-2022-24899","description":"Contao is a powerful open source CMS that allows you to create professional websites and scalable web applications. In versions of Contao prior to 4.13.3 it is possible to inject code into the canonical tag. As a workaround users may disable canonical tags in the root page settings.","state":"PUBLIC","assigner":"security-advisories@github.com","published_at":"2022-05-06 00:15:00","updated_at":"2022-05-13 19:34:00"},"problem_types":["CWE-79"],"metrics":[],"references":[{"url":"https://contao.org/en/security-advisories/cross-site-scripting-via-canonical-url.html","name":"https://contao.org/en/security-advisories/cross-site-scripting-via-canonical-url.html","refsource":"MISC","tags":[],"title":"Cross site scripting via canonical URL - Contao","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/contao/contao/commit/199206849a87ddd0fa5cf674eb3c58292fd8366c","name":"https://github.com/contao/contao/commit/199206849a87ddd0fa5cf674eb3c58292fd8366c","refsource":"MISC","tags":[],"title":"Merge pull request from GHSA-m8x6-6r63-qvj2 · contao/contao@1992068 · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://github.com/contao/contao/security/advisories/GHSA-m8x6-6r63-qvj2","name":"https://github.com/contao/contao/security/advisories/GHSA-m8x6-6r63-qvj2","refsource":"CONFIRM","tags":[],"title":"Cross site scripting via canonical URL · Advisory · contao/contao · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24899","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24899","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2022","cve_id":"24899","vulnerable":"1","versionEndIncluding":"4.13.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"contao","cpe5":"contao","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"security-advisories@github.com","ID":"CVE-2022-24899","STATE":"PUBLIC","TITLE":"Cross site scripting via canonical tag"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"contao","version":{"version_data":[{"version_value":"< 4.13.3"}]}}]},"vendor_name":"contao"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Contao is a powerful open source CMS that allows you to create professional websites and scalable web applications. In versions of Contao prior to 4.13.3 it is possible to inject code into the canonical tag. As a workaround users may disable canonical tags in the root page settings."}]},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}]},"references":{"reference_data":[{"name":"https://github.com/contao/contao/commit/199206849a87ddd0fa5cf674eb3c58292fd8366c","refsource":"MISC","url":"https://github.com/contao/contao/commit/199206849a87ddd0fa5cf674eb3c58292fd8366c"},{"name":"https://github.com/contao/contao/security/advisories/GHSA-m8x6-6r63-qvj2","refsource":"CONFIRM","url":"https://github.com/contao/contao/security/advisories/GHSA-m8x6-6r63-qvj2"},{"name":"https://contao.org/en/security-advisories/cross-site-scripting-via-canonical-url.html","refsource":"MISC","url":"https://contao.org/en/security-advisories/cross-site-scripting-via-canonical-url.html"}]},"source":{"advisory":"GHSA-m8x6-6r63-qvj2","discovery":"UNKNOWN"}},"nvd":{"publishedDate":"2022-05-06 00:15:00","lastModifiedDate":"2022-05-13 19:34:00","problem_types":["CWE-79"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.7},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"severity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:contao:contao:*:*:*:*:*:*:*:*","versionStartIncluding":"4.13.0","versionEndIncluding":"4.13.2","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2022","CveId":"24899","Ordinal":"228327","Title":"CVE-2022-24899","CVE":"CVE-2022-24899","Year":"2022"},"notes":[{"CveYear":"2022","CveId":"24899","Ordinal":"1","NoteData":"** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.","Type":"Description","Title":null}]}}}