Statamic CMS remote code execution via front-end form uploads
CVE-2023-47129

8.4HIGH

Key Information:

Vendor: Statamic
Status: Cms
Vendor: CVE Published:; 10 November 2023

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2023-47129?

Statamic is a core Laravel content management system that previously contained a vulnerability allowing crafted PHP files disguised as images to be uploaded through front-end forms with asset upload fields. This vulnerability is limited to forms utilizing the 'Forms' feature and excludes arbitrary forms as well as the control panel. It has been addressed in versions 3.4.13 and 4.33.0, making it essential for users to update their installations to safeguard their applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

cms < 3.4.13 < 3.4.13

cms >= 4.0.0, < 4.33.0 < 4.0.0, 4.33.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2023-47129
Created by Cyber-Wo0dy