CVE-2021-29440

🗓️ 13 Apr 2021 19:55:13Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 187 Views🌐 WEB

Grav file based Web-platform. Twig processing vulnerability allows arbitrary code execution.

Reporter	Title	Published	Views	Family All 18
0day.today	Grav CMS 1.7.10 - Server-Side Template Injection (SSTI) (Authenticated) Exploit	7 Jun 202100:00	–	zdt
Circl	CVE-2021-29440	3 Jun 202111:03	–	circl
CNNVD	Grav 代码注入漏洞	13 Apr 202100:00	–	cnnvd
CNVD	Grav Code Injection Vulnerability	6 May 202100:00	–	cnvd
Check Point Advisories	Grav CMS Command Injection (CVE-2021-29440)	24 Jun 202100:00	–	checkpoint_advisories
Cvelist	CVE-2021-29440 Twig allowing dangerous PHP functions by default	13 Apr 202119:55	–	cvelist
GithubExploit	Exploit for Code Injection in Getgrav Grav	6 Jun 202100:51	–	githubexploit
Exploit DB	Grav CMS 1.7.10 - Server-Side Template Injection (SSTI) (Authenticated)	7 Jun 202100:00	–	exploitdb
Github Security Blog	Grav's Twig processing allowing dangerous PHP functions by default	16 Apr 202119:53	–	github
NVD	CVE-2021-29440	13 Apr 202120:15	–	nvd

NVD

Vulners

Node

getgrav gravRange<1.7.11

[
  {
    "product": "grav",
    "vendor": "getgrav",
    "versions": [
      {
        "status": "affected",
        "version": "< 1.7.11"
      }
    ]
  }
]

Source	Link
blog	www.blog.sonarsource.com/grav-cms-code-execution-vulnerabilities
packagist	www.packagist.org/packages/getgrav/grav
github	www.github.com/getgrav/grav/security/advisories/GHSA-g8r4-p96j-xfxc
packetstormsecurity	www.packetstormsecurity.com/files/162987/Grav-CMS-1.7.10-Server-Side-Template-Injection.html

Parameter	Position	Path	Description	CWE
data[username]	request body	/admin	Authenticated attacker can perform server-side template injection via Grav CMS admin login flow to reach RCE in Twig processing.	CWE-94
data[password]	request body	/admin	Authenticated attacker can perform server-side template injection via Grav CMS admin login flow to reach RCE in Twig processing.	CWE-94
login-nonce	request body	/admin	Authenticated attacker can perform server-side template injection via Grav CMS admin login flow to reach RCE in Twig processing.	CWE-94
data[content]	request body	/admin/pages/{project_name}/:add	Page creation form accepts Twig payload in data[content], enabling SSTI leading to code execution.	CWE-94
data[header][title]	request body	/admin/pages/{project_name}/:add	Page creation form accepts Twig payload in data[content], enabling SSTI leading to code execution.	CWE-94
__form-name__	request body	/admin/pages/{project_name}/:add	Page creation form accepts Twig payload in data[content], enabling SSTI leading to code execution.	CWE-94
__unique_form_id__	request body	/admin/pages/{project_name}/:add	Page creation form accepts Twig payload in data[content], enabling SSTI leading to code execution.	CWE-94
form-nonce	request body	/admin/pages/{project_name}/:add	Page creation form accepts Twig payload in data[content], enabling SSTI leading to code execution.	CWE-94

17 Jun 2026 03:47Current

7.5High risk

Vulners AI Score7.5

CVSS 26.5

CVSS 3.17.2 - 8.4

EPSS0.30623

CWE-94