2017-07-24 12:00:00
mitre
PUBLISHED
Statamic framework before 2.6.0 does not correctly check a sessions permissions when the methods from a users class are called. Problematic methods include reset password, create new account, create new role, etc.