Packagist/getgrav/grav CVE-2024-27923: high 8.8, EPSS 1.36%
Remote Code Execution by uploading a phar file using frontmatter
Action: Upgrade getgrav/grav to 1.7.43 or later.
composer require getgrav/grav:1.7.43Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.43 | - |
Fixed versions
| 1.7.43 |
Sources
- osv: GHSA-f6g2-h7qv-3m5v
- https://github.com/getgrav/grav/security/advisories/GHSA-f6g2-h7qv-3m5v
- https://github.com/getgrav/grav/commit/e3b0aa0c502aad251c1b79d1ee973dcd93711f07
- https://github.com/getgrav/grav
CVE-2024-27923 · published · modified · JSON