| Package | Affected versions | Patched versions |
|---|---|---|
| statamic/cms | < 2.6.0 | 2.6.0 |
| statamic | < 2.6.0 | 2.6.0 |
Statamic framework before 2.6.0 does not correctly check a session's permissions when the methods from a user's class are called. Problematic methods include reset password, create new account, create new role, etc.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free