Beveiligingsadvies

CVE-2025-50286

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-06 00:00:00

Laatst bijgewerkt 2025-08-07 04:20:30

Toegewezen door mitre

CVSS-score 8.1

Status PUBLISHED

Beschrijving

A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plugin via the /admin/tools/direct-install interface. Once uploaded, the plugin is automatically extracted and loaded, allowing arbitrary PHP code execution and reverse shell access.

← Alle CVE's bekijken Bekijk op cve.org ↗