Lucene search
+L

1 matches found

CNNVD
CNNVD
•added 2026/10/21 4:00 p.m.•3 views

Grav permission and access control issues vulnerability

Versions prior to Grav 1.4.17, specifically 1.4.0, contain a permission and access control vulnerability. This issue arises because the generic /api/v1/flex-objects/pages API route only checks for directory-level permissions on admin.pages; it fails to enforce the api.pages.read/write permissions...

7.1CVSS5.9AI score0.00628EPSS
SaveExploits0References2
Rows per page
Query Builder