Path traversal vulnerability in the file manager
ImpactAuthenticated users in the back end can list files outside the document root in the file manager.PatchesUpdate to Contao 4.9.40, 4.13.21 or 5.1.4.WorkaroundsNone.Referenceshttps://contao.org/en/security-advisories/directory-traversal-in-the-file-managerFor more informationIf you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).