Critical · published April 7, 2021
CVSS calls it critical at 9.3. It sits in the 99.6th percentile for exploit probability.
🚨 An unauthenticated user can waltz right into the Grav Admin Plugin and execute admin commands without credentials—like a party crasher at a VIP event! 🔥 Think of it like leaving your front door wide open at a restaurant. Anyone passing by can just walk in, change the menu, or even mess with your kitchen orders without anyone knowing—yikes! An attacker could change site configurations, hijack admin accounts, or even execute commands in the context of the web server user. This could lead to full control over your site, altering how it operates or looks. It's absolutely devastating if your site relies on integrity and security!
Think of it like leaving your front door wide open at a restaurant. Anyone passing by can just walk in, change the menu, or even mess with your kitchen orders without anyone knowing—yikes! This vulnerability in the Grav Admin Plugin (versions 1.10.7 and earlier) allows unauthenticated users to access admin controller methods, leading to arbitrary YAML file creation or modification without any credentials.
An attacker could change site configurations, hijack admin accounts, or even execute commands in the context of the web server user. This could lead to full control over your site, altering how it operates or looks. It's absolutely devastating if your site relies on integrity and security! Upgrade to version 1.10.8 immediately to eliminate this risk. As a workaround, block access to the `/admin` path from untrusted sources to keep your site safe until you can patch. Don't let those party crashers in! Security hero status: activated! You've got this! 🛡️