CyberRota Analysis
AI-GeneratedThe Grav API Plugin for Grav CMS is vulnerable due to inadequate validation of SVG files, allowing an attacker with write permissions to upload malicious SVG files containing JavaScript. This can lead to the execution of scripts in the context of a victim's browser, potentially resulting in session data theft and unauthorized actions. Organizations using the Grav CMS should prioritize updating to version 1.0.2 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.2, the Grav API plugin POST /api/v1/media pipeline in HandlesMediaUploads::processUploadedFile() validates an SVG filename extension but does not invoke Security::sanitizeSVG(). An attacker with api.media.write permission can store an SVG containing JavaScript, and the server returns the file as Content-Type: image/svg+xml so the script executes when a victim opens it, allowing session data theft and authenticated actions. This issue is fixed in version 1.0.2.