Description
Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, when OAuth login was enabled with a provider that does not guarantee verified email addresses, an unauthenticated attacker could sign in as an existing user, potentially including a super admin, without knowing that user's password, because the application matched OAuth identities to accounts by email address alone. Exploitation requires OAuth to be explicitly enabled with such a provider. This issue is fixed in versions 5.74.1 and 6.24.0.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
statamic cms
< 5.74.1affected>= 6.0.0, < 6.24.0affected
References
- https://github.com/statamic/cms/security/advisories/GHSA-93qh-5269-9wcf ↗
- https://github.com/statamic/cms/pull/14887 ↗
- https://github.com/statamic/cms/commit/e59dd342c83bc45de26573cfb0536a0bca98255a ↗
- https://github.com/statamic/cms/releases/tag/v5.74.1 ↗
- https://github.com/statamic/cms/releases/tag/v6.24.0 ↗