CVE-2026-28424 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.11 and 6.4.0, user email addresses were included in responses fro…
Medium CVSS: 6.5

CVE-2026-28424

Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.11 and 6.4.0, user email addresses were included in responses from the user fieldtype’s data endpoint for control panel users who did not have the "view users" permission. This has been fixed in 5.73.11 and 6.4.0.
Vendor
Statamic
Product
Statamic
CWE
CWE-862
Yayın Tarihi
2026-02-27 23:16:05
Güncelleme
2026-03-05 14:46:10
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-862 Statamic MEDIUM Statamic 2026

Referanslar

https://github.com/statamic/cms/releases/tag/v5.73.11 https://github.com/statamic/cms/releases/tag/v6.4.0 https://github.com/statamic/cms/security/advisories/GHSA-w878-f8c6-7r63