CVE-2024-52600

Statmatic is a Laravel and Git powered content management system CMS. Prior to version 5.17.0, assets uploaded with appropriately crafted filenames may result in them being placed in a location different than what was configured. The issue affects front-end forms with assets fields and other plac...

CVE-2024-52600

Statmatic is a Laravel and Git powered content management system CMS. Prior to version 5.17.0, assets uploaded with appropriately crafted filenames may result in them being placed in a location different than what was configured. The issue affects front-end forms with assets fields and other plac...

CVE-2024-52600 Statamic CMS has Path Traversal in Asset Upload

Statmatic is a Laravel and Git powered content management system CMS. Prior to version 5.17.0, assets uploaded with appropriately crafted filenames may result in them being placed in a location different than what was configured. The issue affects front-end forms with assets fields and other plac...

CVE-2024-52600

Statamic CMS has a Path Traversal flaw in asset uploads. Before version 5.17.0, assets uploaded with crafted filenames could be placed outside the intended path, potentially affecting front-end asset forms and other upload points and possibly overwriting existing files. Traversal outside the asse...

CVE-2024-52600

Statmatic is a Laravel and Git powered content management system CMS. Prior to version 5.17.0, assets uploaded with appropriately crafted filenames may result in them being placed in a location different than what was configured. The issue affects front-end forms with "assets" fields and other...

PT-2024-35397

Name of the Vulnerable Software and Affected Versions Statmatic versions prior to 5.17.0 Description The issue allows assets uploaded with specially crafted filenames to be placed in a different location than configured, affecting front-end forms with assets fields and other areas where assets ca...

CVE-2024-52600: Improper Limitation of a Pathname to a Restricted Directory

Statmatic is a Laravel and Git powered content management system CMS. Prior to version 5.17.0, assets uploaded with appropriately crafted filenames may result in them being placed in a location different than what was configured. The issue affects front-end forms with assets fields and other plac...