Statamic CMS Sensitive Configuration Exposure Vulnerability in Antlers-Enabled Fields

A vulnerability exists in Statamic CMS versions 5.7.12 prior to 5.73.16 and 6.5.0 prior to 6.7.2. Control panel users with access to Antlers-enabled fields could exploit this vulnerability to access sensitive application configuration values by inserting config variables into their content.

Impact

Exploitation of this vulnerability allowed for unauthorized access to sensitive application configuration values, potentially leading to further security issues or data exposure.

Remediation

Users can upgrade to Statamic CMS versions 5.73.16 or 6.7.2 to address this vulnerability.