3727 matches found
CVE-2025-66297 Grav vulnerable to Privilege Escalation and Authenticated Remote Code Execution via Twig Injection
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a user with admin panel access and permissions to create or edit pages in Grav CMS can enable Twig processing in the page frontmatter. By injecting malicious Twig expressions, the user can escalate their privileges to admin or execute...
CVE-2025-66297 Grav vulnerable to Privilege Escalation and Authenticated Remote Code Execution via Twig Injection
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a user with admin panel access and permissions to create or edit pages in Grav CMS can enable Twig processing in the page frontmatter. By injecting malicious Twig expressions, the user can escalate their privileges to admin or execute...
CVE-2025-66296 Grav vulnerable to Privilege Escalation in Grav Admin: Missing Username Uniqueness Check Allows Admin Account Takeover
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a privilege escalation vulnerability exists in Grav’s Admin plugin due to the absence of username uniqueness validation when creating users. A user with the create user permission can create a new account using the same username as an...
CVE-2025-66296 Grav vulnerable to Privilege Escalation in Grav Admin: Missing Username Uniqueness Check Allows Admin Account Takeover
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a privilege escalation vulnerability exists in Grav’s Admin plugin due to the absence of username uniqueness validation when creating users. A user with the create user permission can create a new account using the same username as an...
CVE-2025-66294
CVE-2025-66294 affects Grav CMS. A Server-Side Template Injection (SSTI) exists due to weak regex validation in the core method cleanDangerousTwig, enabling an authenticated editor to trigger arbitrary commands on the server; in some cases, unauthenticated exploitation is possible. Public materia...
CVE-2025-66294 Grav is vulnerable to RCE via SSTI through Twig Sandbox Bypass
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Server-Side Template Injection SSTI vulnerability exists in Grav that allows authenticated attackers with editor permissions to execute arbitrary commands on the server and, under certain conditions, may also be exploited by...
PT-2025-48565
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, there is an IDOR Insecure Direct Object Reference vulnerability in the Grav CMS Admin Panel which allows low-privilege users to access sensitive information from other accounts. Although direct account takeover is not possible, admin emai...
PT-2025-48563
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, users with read access on the user account management section of the admin panel can view the password hashes of all users, including the admin user. This exposure can potentially lead to privilege escalation if an attacker can crack thes...
PT-2025-48556
Name of the Vulnerable Software and Affected Versions Grav versions prior to 1.8.0-beta.27 Description A user with admin panel access and permissions to create or edit pages in Grav CMS can enable Twig processing in the page frontmatter. By injecting malicious Twig expressions, a user can escalat...
PT-2025-48564
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Denial of Service DoS vulnerability was identified in the "Languages" submenu of the Grav admin configuration panel /admin/config/system. Specifically, the Supported parameter fails to properly validate user input. If a malformed value ...
CVE-2025-3261
creationtimestamp| type| source ---|---|--- 2025-11-27 20:28:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6n7hltwx62s...
CVE-2025-12421
creationtimestamp| type| source ---|---|--- 2025-11-27 19:23:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6n3tbw4je2q 2025-12-01 15:23:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115644995959421221...
CVE-2025-59372
creationtimestamp| type| source ---|---|--- 2025-11-27 18:57:29+00:00| seen| https://t.me/notlukatsky/7751...
CVE-2025-13765
creationtimestamp| type| source ---|---|--- 2025-11-27 16:28:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ms24ep622k...
CVE-2024-9183
creationtimestamp| type| source ---|---|--- 2025-11-27 14:45:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m6mmc2leh72h 2025-11-29 09:22:55+00:00| seen| https://poliverso.org/objects/0477a01e-1ccb44bf-a9c4c3feac15ed01 2025-12-05 18:01:24+00:00| seen|...
CVE-2025-30186
creationtimestamp| type| source ---|---|--- 2025-11-27 13:11:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6mgzqfmuz2a...
CVE-2025-30190
creationtimestamp| type| source ---|---|--- 2025-11-27 12:31:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6metaayar2u...
CVE-2025-13441
creationtimestamp| type| source ---|---|--- 2025-11-27 10:33:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6m6ajw7em2q...
CVE-2025-12666
creationtimestamp| type| source ---|---|--- 2025-11-27 10:16:18+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3m6m5aptkx22d 2025-11-28 02:16:07+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3m6nsv22tde2g...