ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

T1Covered by 1 source · first reported by BleepingComputer at 25 Sept, 20:57 UTC

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability. [...]

security

Sources

• T1ShinyHunters hacked Clop leak site using Grav CMS path traversal flawBleepingComputer25 Sept, 20:57