Unknown · Statamic Cms · CVE-2023-48701
**Name of the Vulnerable Software and Affected Versions**
Statamic CMS versions prior to 3.4.15 and 4.36.0
**Description**
The issue allows HTML files crafted to look like images to be uploaded, bypassing mime validation. This is applicable on front-end forms using the "Forms" feature with an assets field, or within the control panel, which requires authentication.
**Recommendations**
For versions prior to 3.4.15, update to version 3.4.15 or later.
For versions prior to 4.36.0, update to version 4.36.0 or later.
As a temporary workaround, consider restricting access to the "Forms" feature and the control panel to minimize the risk of exploitation.