1 matches found
Grav permission and access control issues vulnerability
Versions prior to Grav 1.4.17, specifically 1.4.0, contain a permission and access control vulnerability. This issue arises because the generic /api/v1/flex-objects/pages API route only checks for directory-level permissions on admin.pages; it fails to enforce the api.pages.read/write permissions...
7.1CVSS5.9AI score0.00628EPSS
SaveExploits0References2
20