Statamic account takeover via XSS and password reset link

CVE-2024-24570

What is CVE-2024-24570?

Statamic, a Laravel and Git powered content management system (CMS), is susceptible to a cross-site scripting (XSS) vulnerability. This security issue arises when HTML files are manipulated to mimic JPG files, enabling malicious uploads via front-end forms without proper mime type validation. Additionally, the vulnerability impacts asset fields in the control panel and the asset browser, posing a risk if an authorized user executes the crafted XSS. This exploitation may also lead to unauthorized access to a user's password reset token through the 'copy password reset link' feature. In response, versions 4.46.0 and 3.4.17 have patched the XSS vulnerability and disabled the password reset link functionality.

References