Improper access control in Grav Admin Plugin - CVE-2021-21425
Published: April 20, 2021 / Updated: November 15, 2024
Vulnerability identifier: #VU52365
CSH Severity: High
CVSS v4: 8.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-21425
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions. A remote attacker can execute some methods of administrator controller without needing any credentials, leading to arbitrary YAML file creation or content change of existing YAML files on the system.
Affected software
Grav Admin Plugin
How to mitigate CVE-2021-21425
Install updates from vendor's website.
Grav Admin Plugin - update to 1.10.8
Links to Public Exploits and PoC-codes
- Exploit #10859 - cve-2021-21425 (working exploit for the old cve-2021-21425 grav cms 1.7.10 vuln) (November 15, 2024)
- Exploit #6468 - CVE-2021-21425 (GravCMS Unauthenticated Arbitrary YAML Write/Update leads to Code Execution (CVE-2021-21425)) (June 24, 2021)
- Exploit #5373 - GravCMS Remote Command Execution (May 9, 2021)