PT-2026-3182 · Grav Cms · Grav Cms

Legend · Publicado 2026-01-15 · Atualizado 2026-01-16 · CVE-2021-47812

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GravCMS version 1.10.7

Description GravCMS version 1.10.7 has an issue allowing remote attackers to write arbitrary YAML configuration and execute PHP code through the scheduler endpoint. Attackers can exploit the admin-nonce parameter to inject base64-encoded payloads and create malicious custom jobs with system command execution. The ''/scheduler'' endpoint is affected. The admin-nonce parameter is used to inject payloads.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2021-47812

Produtos afetados

Grav Cms

Referências · 7

• 🔥 https://exploit-db.com/exploits/49973 · Exploit
• https://twitter.com/CVEnew/status/2012126480076062908 · Publicação no Twitter
• https://vulncheck.com/advisories/gravcms-arbitrary-yaml-writeupdate-unauthenticated · Nota
• https://osv.dev/vulnerability/CVE-2021-47812 · Aviso do Fabricante
• https://getgrav.org · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-47812 · Nota de Segurança
• https://twitter.com/0dayPublishing/status/2011946810382623102 · Publicação no Twitter