Security Advisory

CVE-2026-33171

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-20 21:39:40

Last updated 2026-03-23 21:41:51

Assigner GitHub_M

State PUBLISHED

Description

Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.14 and 6.7.0, authenticated Control Panel users could read arbitrary `.json`, `.yaml`, and `.csv` files from the server by manipulating the file dictionarys `filename` configuration parameter in the fieldtypes endpoint. This has been fixed in 5.73.14 and 6.7.0.

← Browse all CVEs View on cve.org ↗