Lucene search

K
osvGoogleOSV:GHSA-5M64-9HQ5-5PF2
HistoryMay 13, 2022 - 1:12 a.m.

Statamic framework Incorrect Permission Assignment

2022-05-1301:12:20
Google
osv.dev
3
statamic
framework
permission
assignment
security
session
methods

EPSS

0.001

Percentile

42.8%

Statamic framework before 2.6.0 does not correctly check a session’s permissions when the methods from a user’s class are called. Problematic methods include reset password, create new account, create new role, etc.

EPSS

0.001

Percentile

42.8%

Related for OSV:GHSA-5M64-9HQ5-5PF2