CVE-2023-47129
1 advisory.
Packagist/statamic/cms CVE-2023-47129: high 8.3
Statamic CMS remote code execution via front-end form uploads
Action: Upgrade statamic/cms to 3.4.13 or later.
composer require statamic/cms:4.33.0composer require statamic/cms:3.4.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.33.0 | - |
| 0 | 3.4.13 | - |
Fixed versions
| 4.33.0 | 3.4.13 |
Sources
- osv: GHSA-72hg-5wr5-rmfc
- https://github.com/statamic/cms/security/advisories/GHSA-72hg-5wr5-rmfc
- https://nvd.nist.gov/vuln/detail/CVE-2023-47129
- https://github.com/statamic/cms/commit/098ef8024d97286ca501273c18ae75b646262d75
- https://github.com/statamic/cms/commit/f6c688154f6bdbd0b67039f8f11dcd98ba061e77
- https://github.com/statamic/cms
CVE-2023-47129 · published · modified · JSON