Statmic is a core Laravel content management system Composer package. Prior to versions 3.4.13 and 4.33.0, on front-end forms with an asset upload field, PHP files crafted to look like images may be uploaded. This only affects forms using the "Forms" feature and not just _any_ arbitrary form. This does not affect the control panel. This issue has been patched in 3.4.13 and 4.33.0.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2023-11-10T18:48:03.265Z
Updated: 2024-09-03T17:24:55.886Z
Reserved: 2023-10-30T19:57:51.677Z
Link: CVE-2023-47129
Vulnrichment
Updated: 2024-08-02T21:01:22.814Z
NVD
Status : Modified
Published: 2023-11-10T19:15:16.617
Modified: 2024-11-21T08:29:50.363
Link: CVE-2023-47129
Redhat
No data.