Lucene search
+L

5 matches found

OSV
OSV
added 2026/04/16 9:25 p.m.7 views

GHSA-4JJR-VMV7-WH4W Statamic: Unsafe method invocation via query value resolution allows data destruction

Impact Manipulating query parameters on Control Panel and REST API endpoints, or arguments in GraphQL queries, could result in the loss of content, assets, and user accounts. The Control Panel requires authentication with minimal permissions in order to exploit. e.g. "view entries" permission to...

8.1CVSS5.7AI score0.00457EPSS
SaveExploits0References3
Rows per page
Query Builder