File and Path Handling

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Statamic CMS remote code execution via front-end form uploadsCVE-2023-47129statamic · CVSS 8.4 · 1.4% likely

   CWE-434

2. Statamic CMS has Path Traversal in Asset UploadCVE-2024-52600statamic · CVSS 5.3 · 0.6% likely

   CWE-22

3. Statamic: Missing file upload validation on frontend forms allows uploading disallowed file typesCVE-2026-71434statamic · CVSS 5.3 · 0.4% likely

   CWE-434

4. Statamic has a path traversal in file dictionary fieldtypeCVE-2026-33171statamic · CVSS 4.3 · 0.4% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.