CVE-2021-29439
High
Description
The Grav admin plugin prior to version 1.10.11 does not correctly verify caller's privileges. As a consequence, users with the permission `admin.login` can install third-party plugins and their dependencies. By installing the right plugin, an attacker can obtain an arbitrary code execution primitive and elevate their privileges on the instance. The vulnerability has been addressed in version 1.10.11. As a mitigation blocking access to the `/admin` path from untrusted sources will reduce the probability of exploitation.
SeverityHigh
CVSS7.2
Exploit probability—
ProductGetgrav Grav Admin
PublishedApr 13, 2021
First seenApr 13, 2021
Weakness typeCWE-863Incorrect authorization
How to fix
Update
- getgrav grav_admin1.10.11 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| getgrav grav_admin | v < 1.10.11 | 1.10.11 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.