PT-2026-110731 · Grav · Grav Login
CVSS v4.0
8.5
High
| Vector | AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Grav Login plugin versions 1.2.0 through 3.9.8
Description
An information disclosure issue exists where publishers can obtain password-reset tokens by creating a page at the reset route. When a victim accesses an emailed reset link, the page rendered by the
getPage() function exposes the username and bearer token variables, which can lead to the takeover of accounts with higher privileges.Recommendations
Update Grav Login plugin to version 3.9.9 or later.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Grav Login