Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/01 1:30 a.m.11 views

Statamic's missing authorization allows access to email addresses

Impact User email addresses were included in responses from the user fieldtype’s data endpoint for control panel users who did not have the “view users” permission. Patches This has been fixed in 5.73.11 and 6.4.0...

6.5CVSS5.9AI score0.00231EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder