CVE-2026-29924

概要

参考情報

• getgrav/grav · Product

grav のその他の脆弱性

• CVE-2026-59193中 4.9Grav is a file-based Web platform. Prior to 2.0.0, an authenticated admin.super user can crash Grav or fill the disk by uploading a speciall…
• CVE-2020-37256中 5.4Grav before 1.6.30 contains a cross-site scripting vulnerability in the Admin plugin page editor default security configuration. Privileged …
• CVE-2026-42844高 8.8Grav is a file-based Web platform. In Grav 2.0.0-beta.2, a low-privileged authenticated API user with api.media.write can abuse /api/v1/blue…
• CVE-2026-44738高 7.7Grav is a file-based Web platform. Prior to 2.0.0-rc.2, the Twig sandbox allow-list permits any user with the admin.pages role to call confi…
• CVE-2026-42841中 4.8Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with page editing permissions can inject an executable JavaS…