CVE-2026-33884
Statamic's live preview token bypasses content protection for unrelated entries
概要
Statamic's live preview token bypasses content protection for unrelated entries
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.16 and 6.7.2, an authenticated Control Panel user with access to live preview could use a live preview token to access restricted content that the token was not intended for. This has been fixed in 5.73.16 and 6.7.2.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov