Beveiligingsadvies

CVE-2026-62234

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-17 00:07:09

Laatst bijgewerkt 2026-07-23 19:27:48

Toegewezen door VulnCheck

CVSS-score 8.4

Status PUBLISHED

Beschrijving

Grav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing authenticated users with api.webhooks.write permission to create webhooks with file://, dict://, or gopher:// URLs. Attackers can trigger webhook events to read local files, access process information, or pivot to internal services via unrestricted protocol handlers.

← Alle CVE's bekijken Bekijk op cve.org ↗