Lucene search
@huntrdevCVELIST:CVE-2022-2073HistoryJun 29, 2022 - 6:20 p.m.
CVE-2022-2073 Code Injection in getgrav/grav
2022-06-2918:20:11
CWE-94
@huntrdev
www.cve.org
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
8.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.3%
Code Injection in GitHub repository getgrav/grav prior to 1.7.34.
CNA Affected
[
{
"product": "getgrav/grav",
"vendor": "getgrav",
"versions": [
{
"lessThan": "1.7.34",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
github
github
Code injection in grav
2022-06-30 00:00:29
Grav Server-side Template Injection (SSTI) via Twig Default Filters
2023-06-16 19:37:08
Grav Server-side Template Injection (SSTI) via Twig Default Filters
2023-06-16 19:36:39
osv
osv
Code injection in grav
2022-06-30 00:00:29
CVE-2022-2073
2022-06-29 19:15:09
CVE-2023-34448
2023-06-14 23:15:11
veracode
veracode
Remote Code Execution
2022-06-30 05:21:45
Server-side Template Injection(SSTI)
2023-06-21 07:09:56
prion
prion
Code injection
2022-06-29 19:15:00
Design/Logic Flaw
2023-06-14 23:15:00
huntr
huntr
Server Side Template Injection
2022-04-07 21:45:14
cve
cve
CVE-2022-2073
2022-06-29 19:15:09
CVE-2023-34448
2023-06-14 23:15:11
nvd
nvd
CVE-2022-2073
2022-06-29 19:15:09
CVE-2023-34448
2023-06-14 23:15:11
cvelist
cvelist
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
8.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.3%
Related for CVELIST:CVE-2022-2073