CVE-2024-28116

Summary

CVE-2024-28116 is a newly disclosed vulnerability affecting Grav, an open-source content management system. This issue is a Server-Side Template Injection (SSTI) vulnerability, which permits authenticated users, including those with editor permissions, to execute arbitrary code on the server. The flaw bypasses the existing security sandbox, posing a significant risk. Grav CMS users are advised to upgrade to version 1.7.45, which contains a patch to remediate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.