Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2025-57757

MEDIUM5.3

Contao discloses information in the news module

Published Aug 28, 2025

Modified 4 months ago

No fix available

Details

Contao is an Open Source CMS. In versions starting from 5.0.0 and prior to 5.3.38 and 5.6.1, if a news feed contains protected news archives, their news items are not filtered and become publicly available in the RSS feed. This issue has been patched in versions 5.3.38 and 5.6.1. A workaround involves not adding protected news archives to the news feed page.

References

WEBhttps://contao.org/en/security-advisories/information-disclosure-in-the-news-module WEBhttps://github.com/contao/contao/commit/e75f46b11974fbf7a4652e65c19ad6ca84c59271 WEBhttps://github.com/contao/contao/security/advisories/GHSA-w53m-gxvg-vx7p ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-57757

CVSS Analysis

CVSS v3.1

5.3

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

NoneI:N

Availability

NoneA:N

5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness Type (CWE)

Information Disclosure

Information Exposure

Other

Ecosystems

Timeline

PublishedAug 28, 2025

ModifiedAug 28, 2025

CVE-2025-57757 | Mondoo Vulnerability Intelligence