CVE-2024-27923: Remote Code Execution by uploading a phar file using frontmatter

March 6, 2024 (updated February 17, 2026)

Due to insufficient permission verification, user who can write a page use frontmatter feature.
Inadequate File Name Validation

References

github.com/advisories/GHSA-f6g2-h7qv-3m5v
github.com/getgrav/grav
github.com/getgrav/grav/commit/e3b0aa0c502aad251c1b79d1ee973dcd93711f07
github.com/getgrav/grav/security/advisories/GHSA-f6g2-h7qv-3m5v
nvd.nist.gov/vuln/detail/CVE-2024-27923

Code Behaviors & Features

Detect and mitigate CVE-2024-27923 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →