CyberRota Analysis
AI-GeneratedStatamic CMS versions prior to 5.74.1 and 6.24.0 are vulnerable to a flaw that allows untrusted user input in Antlers templates to lead to content and asset loss, with no authentication required for exploitation. This vulnerability poses a risk to sites that utilize affected templates, making it critical for administrators of these versions to prioritize upgrading to the patched releases to mitigate potential data loss. Organizations using Statamic should assess their current version and apply the necessary updates promptly.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, manipulating user-supplied input incorporated into Antlers templates could result in the loss of content and assets, on sites whose templates pass untrusted input into affected areas, and exploitation did not require authentication. This issue is fixed in versions 5.74.1 and 6.24.0.