Statmic is a core Laravel content management system Composer package. Prior to versions 3.4.13 and 4.33.0, on front-end forms with an asset upload field, PHP files crafted to look like images may be uploaded. This only affects forms using the "Forms" feature and not just _any_ arbitrary form. This does not affect the control panel. This issue has been patched in 3.4.13 and 4.33.0.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-11-10T18:48:03.265Z

Updated: 2024-09-03T17:24:55.886Z

Reserved: 2023-10-30T19:57:51.677Z

Link: CVE-2023-47129

cve-icon Vulnrichment

Updated: 2024-08-02T21:01:22.814Z

cve-icon NVD

Status : Modified

Published: 2023-11-10T19:15:16.617

Modified: 2024-11-21T08:29:50.363

Link: CVE-2023-47129

cve-icon Redhat

No data.