Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/03/27 8:38 p.m.35 views

CVE-2026-33884 Statamic's live preview token bypasses content protection for unrelated entries

Statamic is a Laravel and Git powered content management system CMS. Prior to versions 5.73.16 and 6.7.2, an authenticated Control Panel user with access to live preview could use a live preview token to access restricted content that the token was not intended for. This has been fixed in 5.73.16...

4.3CVSS0.00162EPSS
SaveExploits0References1
Rows per page
Query Builder