Skip to content
Threat Feed

Product

Composer/Getgrav/Grav (< 2.0.0-Beta.2)

1 brief RSS
critical threat

Grav CMS Multiple RCE Vulnerabilities

Multiple critical and high severity remote code execution vulnerabilities exist in Grav CMS due to unsafe unserialize functions, command injection in git clone, and an SSTI blocklist bypass, impacting versions prior to 2.0.0-beta.2.

Grav CMS +1 rce unserialize command-injection ssti
3r 2t