PT-2024-36393 · Nearlink · Nearlink

Name of the Vulnerable Software and Affected Versions: NearLink module affected versions not specified Description: The issue is related to insufficient permission verification in the NearLink module. Successful exploitation of this issue may affect service confidentiality. Recommendations: At th...

CVE-2024-30418

Vulnerability of insufficient permission verification in the app management module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-30418

Vulnerability of insufficient permission verification in the app management module. Impact: Successful exploitation of this vulnerability will affect availability...

GHSA-F6G2-H7QV-3M5V Remote Code Execution by uploading a phar file using frontmatter

Summary - Due to insufficient permission verification, user who can write a page use frontmatter feature. - Inadequate File Name Validation Details 1. Insufficient Permission Verification In Grav CMS, "Frontmatter" refers to the metadata block located at the top of a Markdown file. Frontmatter...

Remote Code Execution by uploading a phar file using frontmatter

Summary - Due to insufficient permission verification, user who can write a page use frontmatter feature. - Inadequate File Name Validation Details 1. Insufficient Permission Verification In Grav CMS, "Frontmatter" refers to the metadata block located at the top of a Markdown file. Frontmatter...