CyberRota Analysis
AI-GeneratedThe Grav API Plugin for Grav CMS is vulnerable due to its CorsMiddleware returning permissive CORS headers, allowing JavaScript from any origin to exploit authenticated API endpoints. This flaw enables attackers to submit a compromised JWT, potentially leading to unauthorized data exfiltration and account modifications. Organizations using affected versions of the Grav API Plugin should prioritize patching to version 1.0.0-rc.16 to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.0-rc.16, the Grav API plugin CorsMiddleware returns Access-Control-Allow-Origin: * and permissive OPTIONS responses for authenticated /api/v1 endpoints. JavaScript from any origin can submit an attacker-obtained JWT through the Authorization or X-API-Token header, read the authenticated response, and perform write operations with the token owner's privileges, enabling data exfiltration and account modification. This issue is fixed in version 1.0.0-rc.16.