Skip to content
Threat Feed
Subscribe

Vendor

Getgrav

3 briefs RSS
critical advisory

Grav CMS API Blueprint Upload Privilege Escalation

A low-privileged authenticated API user with `api.media.write` can abuse `/api/v1/blueprint-upload` in Grav CMS to write an arbitrary YAML file into `user/accounts/`, enabling creation of a super-admin account and leading to full administrative compromise of the Grav API.

grav gravcms privilege-escalation yaml-injection
2r 1t
high advisory

Grav File Cache Insecure Deserialization Vulnerability

Grav versions 1.7.44 through 1.7.49.5 are vulnerable to insecure deserialization in the File Cache component, where the `unserialize` function with `allowed_classes => true` can lead to arbitrary code execution if an attacker tampers with cache files.

grav insecure-deserialization code-execution web-application
2r 2t
critical advisory

Grav Form Plugin Anonymous Page Content Overwrite Vulnerability

Grav Form plugin versions before 9.1.0 allow unauthenticated users to overwrite page content by uploading a malicious markdown file, leading to potential privilege escalation by crafting a new super-admin user.

grav-plugin-form grav cms file-upload privilege-escalation content-overwrite
2r 2t