1 matches found
Grav information disclosure vulnerability
Versions 1.7.53.3 through 1.7.53.6 of Grav contain an information disclosure vulnerability. This vulnerability stems from authorization bypass in Debugger::isDebuggerRequestAuthorized. Unauthenticated visitors can use loopback REMOTEADDR to read clockwork/analyzer data. Under a reverse proxy on t...
8.7CVSS5.9AI score0.00307EPSS
SaveExploits0References4
20