getgrav/grav

Grav CMS Backup Endpoint Exposes Admin Password Hashes and Full Installation

The backup download endpoint in Grav CMS allows an authenticated administrator with backup permissions to download a ZIP archive c