{"action":"Upgrade getgrav/grav to 1.7.43 or later.","affected":[{"fixed":"1.7.43","introduced":"0"}],"component":"getgrav/grav","cve_ids":["CVE-2024-27923"],"ecosystem":"Packagist","epss":0.01357,"exploited":false,"fixed_versions":["1.7.43"],"ghsa_id":"GHSA-f6g2-h7qv-3m5v","id":"tcs_01M5KF1GPNBQ6G1RTRYQAKW25E","modified_at":"2026-02-17T20:56:00.266826Z","published_at":"2024-03-06T16:58:33Z","references":["https://osv.dev/vulnerability/GHSA-f6g2-h7qv-3m5v","https://github.com/getgrav/grav/security/advisories/GHSA-f6g2-h7qv-3m5v","https://github.com/getgrav/grav/commit/e3b0aa0c502aad251c1b79d1ee973dcd93711f07","https://github.com/getgrav/grav"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-f6g2-h7qv-3m5v","url":"https://osv.dev/vulnerability/GHSA-f6g2-h7qv-3m5v"}],"summary":"Remote Code Execution by uploading a phar file using frontmatter"}