CVE-2021-47812

9.3 criticalEPSS 2.2%

Critical (9.3) in getgrav grav. EPSS 2.2% chance of exploitation in the next 30 days.

GravCMS 1.10.7 contains an unauthenticated vulnerability that allows remote attackers to write arbitrary YAML configuration and execute PHP code through the scheduler endpoint. Attackers can exploit the admin-nonce parameter to inject base64-encoded payloads and create malicious custom jobs with system command execution.

Severity

CVSS 4.0

9.3 critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2026-01-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

getgrav:grav

References

https://getgrav.org
https://www.exploit-db.com/exploits/49973
https://www.vulncheck.com/advisories/gravcms-arbitrary-yaml-writeupdate-unauthenticated
https://www.exploit-db.com/exploits/49973

Check your stack JSON