CVE-2021-3924

2021-11-0515:15:07

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.5%

JSON

grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’)

CPENameOperatorVersion
graveq1.4.5
graveq1.6.0-rc.3
graveq1.7.0-beta.1
graveq1.1.0
graveq1.5.2
graveq1.7.3
graveq1.0.7
graveq1.6.0-beta.3
graveq0.9.39
graveq0.9.19

Name	Operator	Version
grav	eq	1.4.5
grav	eq	1.6.0-rc.3
grav	eq	1.7.0-beta.1
grav	eq	1.1.0
grav	eq	1.5.2
grav	eq	1.7.3
grav	eq	1.0.7
grav	eq	1.6.0-beta.3
grav	eq	0.9.39
grav	eq	0.9.19

Rows per page:

1-10 of 2421

References

github.com/getgrav/grav/commit/8f9c417c04b89dc8d2de60b95e7696821b2826ce

huntr.dev/bounties/7ca13522-d0c9-4eff-a7dd-6fd1a7f205a2