CyberRota Analysis
AI-GeneratedThe Grav CMS scheduler-webhook plugin is vulnerable to an authentication bypass that enables unauthenticated remote attackers to execute scheduled jobs by exploiting a flaw in webhook token validation. This could lead to the unintended execution of commands defined by the operator, potentially compromising the web server's integrity. Organizations using Grav CMS with this plugin should prioritize addressing this vulnerability to mitigate the risk of unauthorized job execution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Grav CMS scheduler-webhook plugin contains an authentication bypass vulnerability that allows unauthenticated remote attackers to trigger configured scheduled jobs by exploiting a short-circuit logic flaw in the webhook token validation. Attackers can send a single unauthenticated POST request to the scheduler webhook endpoint to execute all configured scheduled jobs or target a specific job, causing unintended execution of operator-defined commands under the web server process user.