1 matches found
CVE-2025-66301: Improper Authorization
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, due to improper authorization checks when modifying critical fields on a POST request to /admin/pages/pagename, an editor with only permissions to change basic content on the form is now able to change the functioning of the form through...
9.6CVSS5.9AI score0.01337EPSS
SaveExploits4References1
20