Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:getgrav:grav_api_plugin:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Grav API Plugin Denial of Service and Authorization Bypass Vulnerabilities

The Grav API plugin for Grav CMS contains multiple vulnerabilities allowing unauthenticated resource exhaustion and authorized users to bypass page-level access controls.

Grav API plugin denial-of-service broken-access-control grav cms
1t 1c