Adversaries Can Compromise User Accounts and Read Sensitive Information

CVE-2024-34082

What is CVE-2024-34082?

Grav, a file-based Web platform, exhibits a security vulnerability that allows low-privilege users with page editing capabilities to read sensitive server files using Twig syntax. This includes files containing hashed user passwords, two-factor authentication secrets, and password reset tokens, particularly located in the /grav/user/accounts/*.yaml directory. Exploiting this vulnerability can enable adversaries to compromise registered user accounts, including those of administrators, either by cracking the hashed passwords or by utilizing the exposed password reset tokens. An attacker could perform a full account takeover, resulting in significant data breaches and unauthorized access. Users are advised to upgrade to version 1.7.46 or later to mitigate these risks.

References