https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T09:33:30.214577+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-66301 CVE-2025-66301 — Grav ihas Broken Access Control which allows an Editor to modify the page's YAML Frontmatter to alter form processing a… 2026-10-12T09:33:30.229388+00:00

Affected: getgrav grav

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, due to improper authorization checks when modifying critical fields on a POST request to /admin/pages/{page_name}, an editor with only permissions to change basic content on the form is now able to change the functioning of the form through modifying the content of the data[_json][header][form] which is the YAML frontmatter which includes the process section which dictates what happens after a user submits the form which include some important actions that could lead to further vulnerabilities. This vulnerability is fixed in 1.8.0-beta.27.