| Package | Affected versions | Patched versions |
|---|---|---|
| statamic/cms | ≥ 4.0.0, < 4.33.0< 3.4.13 | 4.33.03.4.13 |
| statamic | ≥ 4.0.0, < 4.33.0< 3.4.13 | 4.33.03.4.13 |
On front-end forms with an asset upload field, PHP files crafted to look like images may be uploaded regardless of mime validation rules. This only affects forms using the "Forms" feature and not just any arbitrary form. This does not affect the control panel.
It has been patched in 3.4.13 and 4.33.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free