Skip to content
Threat Feed

Vendor

Grav

2 briefs RSS
critical threat

Grav CMS Multiple RCE Vulnerabilities

Multiple critical and high severity remote code execution vulnerabilities exist in Grav CMS due to unsafe unserialize functions, command injection in git clone, and an SSTI blocklist bypass, impacting versions prior to 2.0.0-beta.2.

Grav CMS +1 rce unserialize command-injection ssti
3r 2t
critical advisory

Grav Login Plugin Privilege Escalation Vulnerability

Unauthenticated users can escalate privileges to admin in Grav CMS by manipulating registration data due to missing server-side validation in the Login plugin.

Login Plugin +2 grav privilege-escalation web
2r 1t 1i