Non évaluée

Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the admin panel and File Manager pl...

CVE-2026-29924 Première détection SecPulse Mar 30, 09:00

Description d'origine La description telle que publiée par la source (souvent en anglais).

Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the admin panel and File Manager plugin.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
package github.com

Faits clés

Gravité: Non évaluée
Publication: Mar 30, 2026
Première détection SecPulse: Mar 30, 09:00

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:11