EUVD-2025-200109

Grav has Broken Access Control which allows an Editor to modify the page's YAML Frontmatter to alter form processing actions...

PT-2025-48560

Name of the Vulnerable Software and Affected Versions Grav versions prior to 1.8.0-beta.27 Description Grav is a file-based Web platform. Improper authorization checks when modifying critical fields on a POST request to the /admin/pages/page name endpoint allow an editor with limited permissions ...