Skip to content
Threat Feed

Tag

Yaml-Injection

1 brief RSS
critical advisory

Grav CMS API Blueprint Upload Privilege Escalation

A low-privileged authenticated API user with `api.media.write` can abuse `/api/v1/blueprint-upload` in Grav CMS to write an arbitrary YAML file into `user/accounts/`, enabling creation of a super-admin account and leading to full administrative compromise of the Grav API.

grav gravcms privilege-escalation yaml-injection
2r 1t