Skip to content
OpenAdvisories

Product · getgrav

GravCMS

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2021-47812

    GravCMS 1.10.7 - Arbitrary YAML Write/Update (Unauthenticated) (2)

    GravCMS 1.10.7 contains an unauthenticated vulnerability that allows remote attackers to write arbitrary YAML configuration and execute PHP code through the scheduler endpoint. Attackers can exploit the admin-nonce parameter to inject base64-encoded payloads …

    getgrav GravCMS