CVE-2017-11422
CVE-2017-11422
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Statamic framework before 2.6.0 does not correctly check a session's permissions when the methods from a user's class are called. Problematic methods include reset password, create new account, create new role, etc.
CVSS 8.8 · High · EPSS 0.9% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
statamic/cms Packagist
- Affected ranges
- ECOSYSTEM: < 2.6.0
Update to 2.6.0