PT-2017-12004

Name of the Vulnerable Software and Affected Versions Statamic framework versions prior to 2.6.0 Description The issue arises from incorrect permission checking for sessions when methods from a user's class are invoked. This affects various methods, including resetPassword, createNewAccount, and...

CVE-2017-11422: Incorrect Permission Assignment for Critical Resource

Statamic framework before 2.6.0 does not correctly check a session's permissions when the methods from a user's class are called. Problematic methods include reset password, create new account, create new role, etc...