CVE-2026-33884
Statamic's live preview token bypasses content protection for unrelated entries
Résumé
Statamic's live preview token bypasses content protection for unrelated entries
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.16 and 6.7.2, an authenticated Control Panel user with access to live preview could use a live preview token to access restricted content that the token was not intended for. This has been fixed in 5.73.16 and 6.7.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov