CVE-2024-28116

Summary

CVE-2024-28116 is a newly identified vulnerability affecting the open-source Grav content management system. This issue allows authenticated users, including those with editor permissions, to execute arbitrary code on the server through a Server-Side Template Injection (SSTI) vulnerability. Grav CMS versions prior to 1.7.45 are susceptible to this exploit, which can bypass the existing security sandbox. The latest release, version 1.7.45, includes a patch to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.