CVE-2020-29553

The Scheduler in Grav CMS through 1.7.0-rc.17 allows an attacker to execute a system command by tricking an admin into visiting a malicious website (CSRF).

Link	Resource
https://blog.bssi.fr/cve-2020-29553-cve-2020-29555-cve-2020-29556-multiple-vulnerabilities-within-cms-grav/	Exploit Third Party Advisory

Configuration 1

cpe:2.3:a:getgrav:grav_cms:1.7.0:beta8:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:beta9:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:beta10:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc1:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc2:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc3:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc4:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc5:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc6:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc7:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc8:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc9:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc10:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc11:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc12:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc13:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc14:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc15:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc16:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:rc17:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:beta1:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:beta2:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:beta3:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:beta4:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:beta5:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:beta6:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:1.7.0:beta7:*:*:*:*:*:* cpe:2.3:a:getgrav:grav_cms:*:*:*:*:*:*:*:*

---

Published : 2021-03-15 07:15

Updated : 2021-03-18 03:26

---

NVD link : CVE-2020-29553

Mitre link : CVE-2020-29553

No products.

CWE-352