Grav CMS 1.7.44 Server-Side Template Injection

Discussion in 'News Aggregator' started by Packet Storm, 8 Oct 2024.

  1. Packet Storm

    Packet Storm Guest

    GenGravSSTIExploit is a proof of concept Python script that exploits an authenticated server-side template injection (SSTI) vulnerability in Grav CMS versions 1.7.44 and below. This vulnerability allows a user with editor permissions to execute OS commands on a remote server.

    Continue reading...
     
    #1 Packet Storm, 8 Oct 2024
(You must log in or sign up to post here.)

Share This Page

Loading...