CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-24784

Statamic is a Laravel and Git powered CMS. Before versions 3.2.39 and 3.3.2, it is possible to confirm a single character of a user's password hash using a specially crafted regular expression filter in the users endpoint of the REST API. Multiple such requests can eventually uncover the entire hash. The hash is not present in the response, however the presence or absence of a result confirms if the character is in the right position. The API has throttling enabled by default, making this a time intensive task. Both the REST API and the users endpoint need to be enabled, as they are disabled by default. The issue has been fixed in versions 3.2.39 and above, and 3.3.2 and above.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 48.6%

CVSS Severity

CVSS v3 Score 3.7

CVSS v2 Score 4.3

References

Products affected by CVE-2022-24784

Statamic » Statamic » Version: 2.0.0

cpe:2.3:a:statamic:statamic:2.0.0
Statamic » Statamic » Version: 2.0.1

cpe:2.3:a:statamic:statamic:2.0.1
Statamic » Statamic » Version: 2.0.10

cpe:2.3:a:statamic:statamic:2.0.10
Statamic » Statamic » Version: 2.0.11

cpe:2.3:a:statamic:statamic:2.0.11
Statamic » Statamic » Version: 2.0.2

cpe:2.3:a:statamic:statamic:2.0.2
Statamic » Statamic » Version: 2.0.3

cpe:2.3:a:statamic:statamic:2.0.3
Statamic » Statamic » Version: 2.0.4

cpe:2.3:a:statamic:statamic:2.0.4
Statamic » Statamic » Version: 2.0.5

cpe:2.3:a:statamic:statamic:2.0.5
Statamic » Statamic » Version: 2.0.6

cpe:2.3:a:statamic:statamic:2.0.6
Statamic » Statamic » Version: 2.0.7

cpe:2.3:a:statamic:statamic:2.0.7
Statamic » Statamic » Version: 2.0.8

cpe:2.3:a:statamic:statamic:2.0.8
Statamic » Statamic » Version: 2.0.9

cpe:2.3:a:statamic:statamic:2.0.9
Statamic » Statamic » Version: 2.1.0

cpe:2.3:a:statamic:statamic:2.1.0
Statamic » Statamic » Version: 2.1.1

cpe:2.3:a:statamic:statamic:2.1.1
Statamic » Statamic » Version: 2.1.10

cpe:2.3:a:statamic:statamic:2.1.10
Statamic » Statamic » Version: 2.1.11

cpe:2.3:a:statamic:statamic:2.1.11
Statamic » Statamic » Version: 2.1.12

cpe:2.3:a:statamic:statamic:2.1.12
Statamic » Statamic » Version: 2.1.13

cpe:2.3:a:statamic:statamic:2.1.13
Statamic » Statamic » Version: 2.1.14

cpe:2.3:a:statamic:statamic:2.1.14
Statamic » Statamic » Version: 2.1.15

cpe:2.3:a:statamic:statamic:2.1.15
Statamic » Statamic » Version: 2.1.16

cpe:2.3:a:statamic:statamic:2.1.16
Statamic » Statamic » Version: 2.1.17

cpe:2.3:a:statamic:statamic:2.1.17
Statamic » Statamic » Version: 2.1.18

cpe:2.3:a:statamic:statamic:2.1.18
Statamic » Statamic » Version: 2.1.19

cpe:2.3:a:statamic:statamic:2.1.19
Statamic » Statamic » Version: 2.1.2

cpe:2.3:a:statamic:statamic:2.1.2
Statamic » Statamic » Version: 2.1.3

cpe:2.3:a:statamic:statamic:2.1.3
Statamic » Statamic » Version: 2.1.4

cpe:2.3:a:statamic:statamic:2.1.4
Statamic » Statamic » Version: 2.1.5

cpe:2.3:a:statamic:statamic:2.1.5
Statamic » Statamic » Version: 2.1.6

cpe:2.3:a:statamic:statamic:2.1.6
Statamic » Statamic » Version: 2.1.7

cpe:2.3:a:statamic:statamic:2.1.7
Statamic » Statamic » Version: 2.1.8

cpe:2.3:a:statamic:statamic:2.1.8
Statamic » Statamic » Version: 2.1.9

cpe:2.3:a:statamic:statamic:2.1.9
Statamic » Statamic » Version: 2.10.0

cpe:2.3:a:statamic:statamic:2.10.0
Statamic » Statamic » Version: 2.10.1

cpe:2.3:a:statamic:statamic:2.10.1
Statamic » Statamic » Version: 2.10.2

cpe:2.3:a:statamic:statamic:2.10.2
Statamic » Statamic » Version: 2.10.3

cpe:2.3:a:statamic:statamic:2.10.3
Statamic » Statamic » Version: 2.10.4

cpe:2.3:a:statamic:statamic:2.10.4
Statamic » Statamic » Version: 2.10.5

cpe:2.3:a:statamic:statamic:2.10.5
Statamic » Statamic » Version: 2.10.6

cpe:2.3:a:statamic:statamic:2.10.6
Statamic » Statamic » Version: 2.10.7

cpe:2.3:a:statamic:statamic:2.10.7
Statamic » Statamic » Version: 2.11.0

cpe:2.3:a:statamic:statamic:2.11.0
Statamic » Statamic » Version: 2.11.1

cpe:2.3:a:statamic:statamic:2.11.1
Statamic » Statamic » Version: 2.11.2

cpe:2.3:a:statamic:statamic:2.11.2
Statamic » Statamic » Version: 2.11.3

cpe:2.3:a:statamic:statamic:2.11.3
Statamic » Statamic » Version: 2.5.0

cpe:2.3:a:statamic:statamic:2.5.0
Statamic » Statamic » Version: 2.5.1

cpe:2.3:a:statamic:statamic:2.5.1
Statamic » Statamic » Version: 2.5.10

cpe:2.3:a:statamic:statamic:2.5.10
Statamic » Statamic » Version: 2.5.11

cpe:2.3:a:statamic:statamic:2.5.11
Statamic » Statamic » Version: 2.5.2

cpe:2.3:a:statamic:statamic:2.5.2
Statamic » Statamic » Version: 2.5.3

cpe:2.3:a:statamic:statamic:2.5.3
Statamic » Statamic » Version: 2.5.4

cpe:2.3:a:statamic:statamic:2.5.4
Statamic » Statamic » Version: 2.5.5

cpe:2.3:a:statamic:statamic:2.5.5
Statamic » Statamic » Version: 2.5.6

cpe:2.3:a:statamic:statamic:2.5.6
Statamic » Statamic » Version: 2.5.7

cpe:2.3:a:statamic:statamic:2.5.7
Statamic » Statamic » Version: 2.5.8

cpe:2.3:a:statamic:statamic:2.5.8
Statamic » Statamic » Version: 2.5.9

cpe:2.3:a:statamic:statamic:2.5.9
Statamic » Statamic » Version: 2.6.0

cpe:2.3:a:statamic:statamic:2.6.0
Statamic » Statamic » Version: 2.6.1

cpe:2.3:a:statamic:statamic:2.6.1
Statamic » Statamic » Version: 2.6.2

cpe:2.3:a:statamic:statamic:2.6.2
Statamic » Statamic » Version: 2.6.3

cpe:2.3:a:statamic:statamic:2.6.3
Statamic » Statamic » Version: 2.6.4

cpe:2.3:a:statamic:statamic:2.6.4
Statamic » Statamic » Version: 2.6.5

cpe:2.3:a:statamic:statamic:2.6.5
Statamic » Statamic » Version: 2.6.6

cpe:2.3:a:statamic:statamic:2.6.6
Statamic » Statamic » Version: 2.6.7

cpe:2.3:a:statamic:statamic:2.6.7
Statamic » Statamic » Version: 2.6.8

cpe:2.3:a:statamic:statamic:2.6.8
Statamic » Statamic » Version: 2.6.9

cpe:2.3:a:statamic:statamic:2.6.9
Statamic » Statamic » Version: 2.7.0

cpe:2.3:a:statamic:statamic:2.7.0
Statamic » Statamic » Version: 2.7.1

cpe:2.3:a:statamic:statamic:2.7.1
Statamic » Statamic » Version: 2.7.2

cpe:2.3:a:statamic:statamic:2.7.2
Statamic » Statamic » Version: 2.7.3

cpe:2.3:a:statamic:statamic:2.7.3
Statamic » Statamic » Version: 2.8.0

cpe:2.3:a:statamic:statamic:2.8.0
Statamic » Statamic » Version: 2.8.1

cpe:2.3:a:statamic:statamic:2.8.1
Statamic » Statamic » Version: 2.8.10

cpe:2.3:a:statamic:statamic:2.8.10
Statamic » Statamic » Version: 2.8.11

cpe:2.3:a:statamic:statamic:2.8.11
Statamic » Statamic » Version: 2.8.12

cpe:2.3:a:statamic:statamic:2.8.12
Statamic » Statamic » Version: 2.8.2

cpe:2.3:a:statamic:statamic:2.8.2
Statamic » Statamic » Version: 2.8.3

cpe:2.3:a:statamic:statamic:2.8.3
Statamic » Statamic » Version: 2.8.4

cpe:2.3:a:statamic:statamic:2.8.4
Statamic » Statamic » Version: 2.8.5

cpe:2.3:a:statamic:statamic:2.8.5
Statamic » Statamic » Version: 2.8.6

cpe:2.3:a:statamic:statamic:2.8.6
Statamic » Statamic » Version: 2.8.7

cpe:2.3:a:statamic:statamic:2.8.7
Statamic » Statamic » Version: 2.8.8

cpe:2.3:a:statamic:statamic:2.8.8
Statamic » Statamic » Version: 2.8.9

cpe:2.3:a:statamic:statamic:2.8.9
Statamic » Statamic » Version: 2.9.0

cpe:2.3:a:statamic:statamic:2.9.0
Statamic » Statamic » Version: 2.9.1

cpe:2.3:a:statamic:statamic:2.9.1
Statamic » Statamic » Version: 2.9.2

cpe:2.3:a:statamic:statamic:2.9.2
Statamic » Statamic » Version: 2.9.3

cpe:2.3:a:statamic:statamic:2.9.3
Statamic » Statamic » Version: 2.9.4

cpe:2.3:a:statamic:statamic:2.9.4
Statamic » Statamic » Version: 2.9.5

cpe:2.3:a:statamic:statamic:2.9.5
Statamic » Statamic » Version: 2.9.6

cpe:2.3:a:statamic:statamic:2.9.6
Statamic » Statamic » Version: 2.9.7

cpe:2.3:a:statamic:statamic:2.9.7
Statamic » Statamic » Version: 2.9.8

cpe:2.3:a:statamic:statamic:2.9.8
Statamic » Statamic » Version: 3.0.0

cpe:2.3:a:statamic:statamic:3.0.0
Statamic » Statamic » Version: 3.0.1

cpe:2.3:a:statamic:statamic:3.0.1
Statamic » Statamic » Version: 3.0.10

cpe:2.3:a:statamic:statamic:3.0.10
Statamic » Statamic » Version: 3.0.11

cpe:2.3:a:statamic:statamic:3.0.11
Statamic » Statamic » Version: 3.0.12

cpe:2.3:a:statamic:statamic:3.0.12
Statamic » Statamic » Version: 3.0.13

cpe:2.3:a:statamic:statamic:3.0.13
Statamic » Statamic » Version: 3.0.14

cpe:2.3:a:statamic:statamic:3.0.14
Statamic » Statamic » Version: 3.0.15

cpe:2.3:a:statamic:statamic:3.0.15
Statamic » Statamic » Version: 3.0.16

cpe:2.3:a:statamic:statamic:3.0.16
Statamic » Statamic » Version: 3.0.17

cpe:2.3:a:statamic:statamic:3.0.17
Statamic » Statamic » Version: 3.0.18

cpe:2.3:a:statamic:statamic:3.0.18
Statamic » Statamic » Version: 3.0.19

cpe:2.3:a:statamic:statamic:3.0.19
Statamic » Statamic » Version: 3.0.2

cpe:2.3:a:statamic:statamic:3.0.2
Statamic » Statamic » Version: 3.0.20

cpe:2.3:a:statamic:statamic:3.0.20
Statamic » Statamic » Version: 3.0.21

cpe:2.3:a:statamic:statamic:3.0.21
Statamic » Statamic » Version: 3.0.22

cpe:2.3:a:statamic:statamic:3.0.22
Statamic » Statamic » Version: 3.0.23

cpe:2.3:a:statamic:statamic:3.0.23
Statamic » Statamic » Version: 3.0.24

cpe:2.3:a:statamic:statamic:3.0.24
Statamic » Statamic » Version: 3.0.25

cpe:2.3:a:statamic:statamic:3.0.25
Statamic » Statamic » Version: 3.0.26

cpe:2.3:a:statamic:statamic:3.0.26
Statamic » Statamic » Version: 3.0.27

cpe:2.3:a:statamic:statamic:3.0.27
Statamic » Statamic » Version: 3.0.28

cpe:2.3:a:statamic:statamic:3.0.28
Statamic » Statamic » Version: 3.0.29

cpe:2.3:a:statamic:statamic:3.0.29
Statamic » Statamic » Version: 3.0.3

cpe:2.3:a:statamic:statamic:3.0.3
Statamic » Statamic » Version: 3.0.30

cpe:2.3:a:statamic:statamic:3.0.30
Statamic » Statamic » Version: 3.0.31

cpe:2.3:a:statamic:statamic:3.0.31
Statamic » Statamic » Version: 3.0.32

cpe:2.3:a:statamic:statamic:3.0.32
Statamic » Statamic » Version: 3.0.33

cpe:2.3:a:statamic:statamic:3.0.33
Statamic » Statamic » Version: 3.0.34

cpe:2.3:a:statamic:statamic:3.0.34
Statamic » Statamic » Version: 3.0.35

cpe:2.3:a:statamic:statamic:3.0.35
Statamic » Statamic » Version: 3.0.35.1

cpe:2.3:a:statamic:statamic:3.0.35.1
Statamic » Statamic » Version: 3.0.36

cpe:2.3:a:statamic:statamic:3.0.36
Statamic » Statamic » Version: 3.0.36.1

cpe:2.3:a:statamic:statamic:3.0.36.1
Statamic » Statamic » Version: 3.0.37

cpe:2.3:a:statamic:statamic:3.0.37
Statamic » Statamic » Version: 3.0.38

cpe:2.3:a:statamic:statamic:3.0.38
Statamic » Statamic » Version: 3.0.39

cpe:2.3:a:statamic:statamic:3.0.39
Statamic » Statamic » Version: 3.0.4

cpe:2.3:a:statamic:statamic:3.0.4
Statamic » Statamic » Version: 3.0.40

cpe:2.3:a:statamic:statamic:3.0.40
Statamic » Statamic » Version: 3.0.41

cpe:2.3:a:statamic:statamic:3.0.41
Statamic » Statamic » Version: 3.0.42

cpe:2.3:a:statamic:statamic:3.0.42
Statamic » Statamic » Version: 3.0.43

cpe:2.3:a:statamic:statamic:3.0.43
Statamic » Statamic » Version: 3.0.44

cpe:2.3:a:statamic:statamic:3.0.44
Statamic » Statamic » Version: 3.0.45

cpe:2.3:a:statamic:statamic:3.0.45
Statamic » Statamic » Version: 3.0.46

cpe:2.3:a:statamic:statamic:3.0.46
Statamic » Statamic » Version: 3.0.47

cpe:2.3:a:statamic:statamic:3.0.47
Statamic » Statamic » Version: 3.0.48

cpe:2.3:a:statamic:statamic:3.0.48
Statamic » Statamic » Version: 3.0.49

cpe:2.3:a:statamic:statamic:3.0.49
Statamic » Statamic » Version: 3.0.5

cpe:2.3:a:statamic:statamic:3.0.5
Statamic » Statamic » Version: 3.0.6

cpe:2.3:a:statamic:statamic:3.0.6
Statamic » Statamic » Version: 3.0.7

cpe:2.3:a:statamic:statamic:3.0.7
Statamic » Statamic » Version: 3.0.8

cpe:2.3:a:statamic:statamic:3.0.8
Statamic » Statamic » Version: 3.0.9

cpe:2.3:a:statamic:statamic:3.0.9
Statamic » Statamic » Version: 3.1.0

cpe:2.3:a:statamic:statamic:3.1.0
Statamic » Statamic » Version: 3.1.1

cpe:2.3:a:statamic:statamic:3.1.1
Statamic » Statamic » Version: 3.1.10

cpe:2.3:a:statamic:statamic:3.1.10
Statamic » Statamic » Version: 3.1.11

cpe:2.3:a:statamic:statamic:3.1.11
Statamic » Statamic » Version: 3.1.12

cpe:2.3:a:statamic:statamic:3.1.12
Statamic » Statamic » Version: 3.1.13

cpe:2.3:a:statamic:statamic:3.1.13
Statamic » Statamic » Version: 3.1.14

cpe:2.3:a:statamic:statamic:3.1.14
Statamic » Statamic » Version: 3.1.15

cpe:2.3:a:statamic:statamic:3.1.15
Statamic » Statamic » Version: 3.1.16

cpe:2.3:a:statamic:statamic:3.1.16
Statamic » Statamic » Version: 3.1.17

cpe:2.3:a:statamic:statamic:3.1.17
Statamic » Statamic » Version: 3.1.18

cpe:2.3:a:statamic:statamic:3.1.18
Statamic » Statamic » Version: 3.1.19

cpe:2.3:a:statamic:statamic:3.1.19
Statamic » Statamic » Version: 3.1.2

cpe:2.3:a:statamic:statamic:3.1.2
Statamic » Statamic » Version: 3.1.20

cpe:2.3:a:statamic:statamic:3.1.20
Statamic » Statamic » Version: 3.1.21

cpe:2.3:a:statamic:statamic:3.1.21
Statamic » Statamic » Version: 3.1.22

cpe:2.3:a:statamic:statamic:3.1.22
Statamic » Statamic » Version: 3.1.23

cpe:2.3:a:statamic:statamic:3.1.23
Statamic » Statamic » Version: 3.1.24

cpe:2.3:a:statamic:statamic:3.1.24
Statamic » Statamic » Version: 3.1.25

cpe:2.3:a:statamic:statamic:3.1.25
Statamic » Statamic » Version: 3.1.26

cpe:2.3:a:statamic:statamic:3.1.26
Statamic » Statamic » Version: 3.1.27

cpe:2.3:a:statamic:statamic:3.1.27
Statamic » Statamic » Version: 3.1.28

cpe:2.3:a:statamic:statamic:3.1.28
Statamic » Statamic » Version: 3.1.29

cpe:2.3:a:statamic:statamic:3.1.29
Statamic » Statamic » Version: 3.1.3

cpe:2.3:a:statamic:statamic:3.1.3
Statamic » Statamic » Version: 3.1.30

cpe:2.3:a:statamic:statamic:3.1.30
Statamic » Statamic » Version: 3.1.31

cpe:2.3:a:statamic:statamic:3.1.31
Statamic » Statamic » Version: 3.1.32

cpe:2.3:a:statamic:statamic:3.1.32
Statamic » Statamic » Version: 3.1.33

cpe:2.3:a:statamic:statamic:3.1.33
Statamic » Statamic » Version: 3.1.34

cpe:2.3:a:statamic:statamic:3.1.34
Statamic » Statamic » Version: 3.1.35

cpe:2.3:a:statamic:statamic:3.1.35
Statamic » Statamic » Version: 3.1.4

cpe:2.3:a:statamic:statamic:3.1.4
Statamic » Statamic » Version: 3.1.5

cpe:2.3:a:statamic:statamic:3.1.5
Statamic » Statamic » Version: 3.1.6

cpe:2.3:a:statamic:statamic:3.1.6
Statamic » Statamic » Version: 3.1.7

cpe:2.3:a:statamic:statamic:3.1.7
Statamic » Statamic » Version: 3.1.8

cpe:2.3:a:statamic:statamic:3.1.8
Statamic » Statamic » Version: 3.1.9

cpe:2.3:a:statamic:statamic:3.1.9
Statamic » Statamic » Version: 3.2.0

cpe:2.3:a:statamic:statamic:3.2.0
Statamic » Statamic » Version: 3.2.1

cpe:2.3:a:statamic:statamic:3.2.1
Statamic » Statamic » Version: 3.2.10

cpe:2.3:a:statamic:statamic:3.2.10
Statamic » Statamic » Version: 3.2.11

cpe:2.3:a:statamic:statamic:3.2.11
Statamic » Statamic » Version: 3.2.12

cpe:2.3:a:statamic:statamic:3.2.12
Statamic » Statamic » Version: 3.2.13

cpe:2.3:a:statamic:statamic:3.2.13
Statamic » Statamic » Version: 3.2.14

cpe:2.3:a:statamic:statamic:3.2.14
Statamic » Statamic » Version: 3.2.15

cpe:2.3:a:statamic:statamic:3.2.15
Statamic » Statamic » Version: 3.2.16

cpe:2.3:a:statamic:statamic:3.2.16
Statamic » Statamic » Version: 3.2.17

cpe:2.3:a:statamic:statamic:3.2.17
Statamic » Statamic » Version: 3.2.18

cpe:2.3:a:statamic:statamic:3.2.18
Statamic » Statamic » Version: 3.2.19

cpe:2.3:a:statamic:statamic:3.2.19
Statamic » Statamic » Version: 3.2.2

cpe:2.3:a:statamic:statamic:3.2.2
Statamic » Statamic » Version: 3.2.20

cpe:2.3:a:statamic:statamic:3.2.20
Statamic » Statamic » Version: 3.2.21

cpe:2.3:a:statamic:statamic:3.2.21
Statamic » Statamic » Version: 3.2.22

cpe:2.3:a:statamic:statamic:3.2.22
Statamic » Statamic » Version: 3.2.23

cpe:2.3:a:statamic:statamic:3.2.23
Statamic » Statamic » Version: 3.2.24

cpe:2.3:a:statamic:statamic:3.2.24
Statamic » Statamic » Version: 3.2.25

cpe:2.3:a:statamic:statamic:3.2.25
Statamic » Statamic » Version: 3.2.26

cpe:2.3:a:statamic:statamic:3.2.26
Statamic » Statamic » Version: 3.2.27

cpe:2.3:a:statamic:statamic:3.2.27
Statamic » Statamic » Version: 3.2.28

cpe:2.3:a:statamic:statamic:3.2.28
Statamic » Statamic » Version: 3.2.29

cpe:2.3:a:statamic:statamic:3.2.29
Statamic » Statamic » Version: 3.2.3

cpe:2.3:a:statamic:statamic:3.2.3
Statamic » Statamic » Version: 3.2.30

cpe:2.3:a:statamic:statamic:3.2.30
Statamic » Statamic » Version: 3.2.31

cpe:2.3:a:statamic:statamic:3.2.31
Statamic » Statamic » Version: 3.2.32

cpe:2.3:a:statamic:statamic:3.2.32
Statamic » Statamic » Version: 3.2.33

cpe:2.3:a:statamic:statamic:3.2.33
Statamic » Statamic » Version: 3.2.34

cpe:2.3:a:statamic:statamic:3.2.34
Statamic » Statamic » Version: 3.2.35

cpe:2.3:a:statamic:statamic:3.2.35
Statamic » Statamic » Version: 3.2.36

cpe:2.3:a:statamic:statamic:3.2.36
Statamic » Statamic » Version: 3.2.37

cpe:2.3:a:statamic:statamic:3.2.37
Statamic » Statamic » Version: 3.2.38

cpe:2.3:a:statamic:statamic:3.2.38
Statamic » Statamic » Version: 3.2.4

cpe:2.3:a:statamic:statamic:3.2.4
Statamic » Statamic » Version: 3.2.5

cpe:2.3:a:statamic:statamic:3.2.5
Statamic » Statamic » Version: 3.2.6

cpe:2.3:a:statamic:statamic:3.2.6
Statamic » Statamic » Version: 3.2.7

cpe:2.3:a:statamic:statamic:3.2.7
Statamic » Statamic » Version: 3.2.8

cpe:2.3:a:statamic:statamic:3.2.8
Statamic » Statamic » Version: 3.2.9

cpe:2.3:a:statamic:statamic:3.2.9
Statamic » Statamic » Version: 3.3.0

cpe:2.3:a:statamic:statamic:3.3.0
Statamic » Statamic » Version: 3.3.1

cpe:2.3:a:statamic:statamic:3.3.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-24784

Products

Pricing

Contact Us