CVE-2024-24570
1 advisory.
Packagist/statamic/cms CVE-2024-24570: high 8.2, EPSS 0.73%
Statmic CMS vulnerable to account takeover via XSS and password reset link
Action: Upgrade statamic/cms to 3.4.17 or later.
composer require statamic/cms:4.46.0composer require statamic/cms:3.4.17Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.00 | 4.46.0 | - |
| 0 | 3.4.17 | - |
Fixed versions
| 4.46.0 | 3.4.17 |
Sources
- osv: GHSA-vqxq-hvxw-9mv9
- https://github.com/statamic/cms/security/advisories/GHSA-vqxq-hvxw-9mv9
- https://nvd.nist.gov/vuln/detail/CVE-2024-24570
- https://github.com/statamic/cms
- http://packetstormsecurity.com/files/177133/Statamic-CMS-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2024/Feb/17
CVE-2024-24570 · published · modified · JSON