CVE-2026-33171 in Statamic
요약
\~에 의해 MITRE • 2026. 03. 21.
Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.14 and 6.7.0, authenticated Control Panel users could read arbitrary `.json`, `.yaml`, and `.csv` files from the server by manipulating the file dictionary's `filename` configuration parameter in the fieldtype's endpoint. This has been fixed in 5.73.14 and 6.7.0.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.