CPE
Contao versions 4.x, 5.x, and 6.x contain an access control bypass vulnerability in the file manager allowing restricted users to manipulate folders outside their authorized scope.