https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T06:36:07.612619+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-30351 cnvd-2025-30351 2026-10-12T06:36:07.616442+00:00 cnvd-2025-30351 https://cve.radiocsirt.org/vuln/euvd-2026-262288 EUVD-2026-262288 2026-10-12T06:36:07.616473+00:00 EUVD-2026-262288 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66301 fkie_cve-2025-66301 2026-10-12T06:36:07.616487+00:00

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, due to improper authorization checks when modifying critical fields on a POST request to /admin/pages/{page_name}, an editor with only permissions to change basic content on the form is now able to change the functioning of the form through modifying the content of the data[_json][header][form] which is the YAML frontmatter which includes the process section which dictates what happens after a user submits the form which include some important actions that could lead to further vulnerabilities. This vulnerability is fixed in 1.8.0-beta.27.

 https://cve.radiocsirt.org/vuln/ghsa-v8x2-fjv7-8hjh GHSA-v8x2-fjv7-8hjh — Grav has Broken Access Control which allows an Editor to modify the page's YAML Frontmatter to alter form processing ac… 2026-10-12T06:36:07.616515+00:00

Affected: Packagist: getgrav/grav

### Summary Due to a broken access control vulnerability in the `/admin/pages/{page_name}` endpoint, an editor ( user with full permissions to pages ) can change the functionality of a form after submission.

### Details Due to improper authorization checks when modifying critical fields on a POST request to `/admin/pages/{page_name}`, an editor with only permissions to change basic content on the form is now able to change the functioning of the form through modifying the content of the `data[_json][header][form]` which is the YAML frontmatter which includes the `process` section which dictates what happens after a user submits the form which include some important actions that could lead to further vulnerabilities.

### PoC

- Have Admin and Form plugins installed - Connect to panel as admin, create user and give him permission for pages all - Now connect as that user and notice you cant edit any process field in the panel - Change anything in the content of the form and save - Intercept the request: ![image](https://github.com/user-attachments/assets/a66767d9-648e-45b5-9031-4a15bee3072a)

- Now modify the field `data[_json][header][form] with the following payload URL-encoded not like this: ``` {"name":"ssti-test 2","fields":{"name":{"type":"text","label":"Name","required":true}},"buttons":{"submit":{"type":"submit","value":"Submit"}},"process":[{"message":"{{ evaluate_twig(form.value('name')) }}"}]} ```

- Change the field and forward it: ![image](https://github.com/user…