CVE-2026-25633 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Statamic is a, Laravel + Git powered CMS designed for building websites. Prior to 5.73.6 and 6.2.5, users without permission to view assets are able are able to…
Medium CVSS: 4.3

CVE-2026-25633

Statamic is a, Laravel + Git powered CMS designed for building websites. Prior to 5.73.6 and 6.2.5, users without permission to view assets are able are able to download them and view their metadata. Logged-out users and users without permission to access the control panel are unable to take advantage of this. This has been fixed in 5.73.6 and 6.2.5.
Vendor
Statamic
Product
Statamic
CWE
CWE-862
Yayın Tarihi
2026-02-11 21:16:18
Güncelleme
2026-02-18 19:36:44
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-862 Statamic MEDIUM Statamic 2026

Referanslar

https://github.com/statamic/cms/commit/5a6f47246edf3a0c453727ffecbfa14333a6bc8a https://github.com/statamic/cms/releases/tag/v5.73.6 https://github.com/statamic/cms/releases/tag/v6.2.5 https://github.com/statamic/cms/security/advisories/GHSA-gwmx-9gcj-332h