CVE-2020-29555

The BackupDelete functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to delete arbitrary files on the underlying server by…

published March 15, 2021

CVSS
—
EPSS
3%
Percentile
86.9
In the wild
Unconfirmed
What it is

The BackupDelete functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to delete arbitrary files on the underlying server by exploiting a path-traversal technique. (This vulnerability can also be exploited by an unauthenticated attacker due to a lack of CSRF protection.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02899 · 86.9th percentile
Published
2021-03-15T18:00Z
EPSS history
Timeline
  • 15 MAR 18:00Z
    The BackupDelete functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to delete arbitrary files on the underlying server by…
    cvelistv5