Lucene search
+L

21 matches found

Cvelist
Cvelist
added 2021/04/07 6:20 p.m.94 views

CVE-2021-21425 Unauthenticated Arbitrary YAML Write/Update leads to Code Execution

Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages. In versions 1.10.7 and earlier, an unauthenticated user can execute some methods of administrator controller without needing any credentials. Particular method execution will result in...

9.3CVSS9.7AI score0.806EPSS
SaveExploits12References4
Rows per page
Query Builder