https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 06:02:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-205671 EUVD-2026-205671 https://cve.radiocsirt.org/vuln/euvd-2026-205671 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52600 <p>Statmatic is a Laravel and Git powered content management system (CMS). Prior to version 5.17.0, assets uploaded with appropriately crafted filenames may result in them being placed in a location different than what was configured. The issue affects front-end forms with `assets` fields and other places where assets can be uploaded, although users would need upload permissions anyway. Files can be uploaded so they would be located on the server in a different location, and potentially override existing files. Traversal outside an asset container is not possible. This path traversal vulnerability has been fixed in 5.17.0.</p> <p>Statmatic is a Laravel and Git powered content management system (CMS). Prior to version 5.17.0, assets uploaded with appropriately crafted filenames may result in them being placed in a location different than what was configured. The issue affects front-end forms with `assets` fields and other places where assets can be uploaded, although users would need upload permissions anyway. Files can be uploaded so they would be located on the server in a different location, and potentially override existing files. Traversal outside an asset container is not possible. This path traversal vulnerability has been fixed in 5.17.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-52600 https://cve.radiocsirt.org/vuln/ghsa-p7f6-8mcm-fwv3 <p><strong>Affected:</strong> Packagist: statamic/cms</p> <p>Assets uploaded with appropriately crafted filenames may result in them being placed in a location different than what was configured.</p> <p>### Impact</p> <p>- Affects front-end forms with `assets` fields. - Affects other places where assets can be uploaded, although users would need upload permissions anyway. - Files can be uploaded so they would be located on the server in a different location, and potentially override existing files. - Traversal _outside_ an asset container was not possible.</p> <p>### Patches</p> <p>This has been fixed in 5.17.0.</p> <p><strong>Affected:</strong> Packagist: statamic/cms</p> <p>Assets uploaded with appropriately crafted filenames may result in them being placed in a location different than what was configured.</p> <p>### Impact</p> <p>- Affects front-end forms with `assets` fields. - Affects other places where assets can be uploaded, although users would need upload permissions anyway. - Files can be uploaded so they would be located on the server in a different location, and potentially override existing files. - Traversal _outside_ an asset container was not possible.</p> <p>### Patches</p> <p>This has been fixed in 5.17.0.</p> https://cve.radiocsirt.org/vuln/ghsa-p7f6-8mcm-fwv3