Contao (4.0.0 < 5.3.54, 5.4.0 < 5.7.17, 6.0.0 < 6.0.6)

Contao versions 4.x, 5.x, and 6.x contain an access control bypass vulnerability in the file manager allowing restricted users to manipulate folders outside their authorized scope.