Statamic CMS Path Traversal Vulnerability Allowing Arbitrary File Read

A path traversal vulnerability has been identified in Statamic CMS versions prior to 5.73.14 and 6.7.0. This vulnerability allows authenticated Control Panel users to read arbitrary .json, .yaml, and .csv files from the server. The issue arises from the ability to manipulate the file dictionary's filename configuration parameter in the fieldtype's endpoint.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive data stored in .json, .yaml, and .csv files on the server.

Remediation

Users can upgrade to Statamic CMS versions 5.73.14 or 6.7.0 to address this vulnerability.