5 matches found
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the field action processing endpoint. An attacker can bypass intended authorization restrictions by submitting crafted requests with attacker-controlled field definitions. Remediation Upgrade statamic/cms to...
5.4CVSS5.8AI score0.00224EPSS
SaveExploits0References2
20