Incorrect Authorization

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Incorrect Authorization in the FlexApiController::update process. An attacker can gain full administrative control by exploiting insufficient...