2376 matches found
PT-2023-24883 · Grav +1 · Grav +1
Name of the Vulnerable Software and Affected Versions: Grav versions prior to 1.7.42 Description: The issue concerns a server-side template injection vulnerability leveraging the default filter function. This allows for remote code execution by invoking arbitrary unsafe functions through other...
CVE-2023-34253: Incomplete List of Disallowed Inputs
Grav is a flat-file content management system. Prior to version 1.7.42, the denylist introduced in commit 9d6a2d to prevent dangerous functions from being executed via injection of malicious templates was insufficient and could be easily subverted in multiple ways -- 1 using unsafe functions that...
CVE-2023-34252: Incomplete List of Disallowed Inputs
Grav is a flat-file content management system. Prior to version 1.7.42, there is a logic flaw in the GravExtension.filterFilter function whereby validation against a denylist of unsafe functions is only performed when the argument passed to filter is a string. However, passing an array as a...
Grav 代码注入漏洞
Grav is a scalable CMS Content Management System for personal blogs, small content publishing platforms, and one-page product displays. A security vulnerability exists in Grav versions prior to 1.7.42, which stems from a server-side template injection SSTI vulnerability...
CVE-2023-34448: Improper Input Validation
Grav is a flat-file content management system. Prior to version 1.7.42, the patch for CVE-2022-2073, a server-side template injection vulnerability in Grav leveraging the default filter function, did not block other built-in functions exposed by Twig's Core Extension that could be used to invoke...
PT-2023-24775 · Grav +1 · Grav +1
Name of the Vulnerable Software and Affected Versions: Grav versions prior to 1.7.42 Description: The issue allows for server-side template injection, which can lead to remote code execution. This can be achieved by embedding malicious PHP code on the administrator screen by a user with page...
PT-2023-24776 · Grav · Grav
Name of the Vulnerable Software and Affected Versions: Grav versions prior to 1.7.42 Description: Grav is a flat-file content management system with a logic flaw in the GravExtension.filterFilter function. This flaw allows validation against a denylist of unsafe functions to be skipped when an...
Grav 代码注入漏洞
Grav is a scalable CMS Content Management System for personal blogs, small content publishing platforms, and one-page product displays. A security vulnerability exists in Grav prior to version 1.7.42, which stems from a server-side template injection SSTI vulnerability that allows an attacker to...
PT-2023-24777 · Grav · Grav
Name of the Vulnerable Software and Affected Versions: Grav versions prior to 1.7.42 Description: The issue concerns a flat-file content management system where the denylist, introduced to prevent the execution of dangerous functions via malicious template injection, was insufficient. This allowe...
CVE-2023-34251: Improper Control of Generation of Code
Grav is a flat-file content management system. Versions prior to 1.7.42 are vulnerable to server side template injection. Remote code execution is possible by embedding malicious PHP code on the administrator screen by a user with page editing privileges. Version 1.7.42 contains a fix for this...
CVE-2023-34452: Improper Neutralization of Input During Web Page Generation
Grav is a flat-file content management system. In versions 1.7.42 and prior, the "/forgotpassword" page has a self-reflected cross-site scripting vulnerability that can be exploited by injecting a script into the "email" parameter of the request. While this vulnerability can potentially allow an...
Remote Code Execution
getgrav/grav is vulnerable to remote code execution. An authenticated remote attacker is able to cause server side template injection via Twig which renders risky functions by default, such as system...
Code injection in grav
Grav is vulnerable to Server Side Template Injection via Twig. According to a previous vulnerability report, Twig should not render dangerous functions by default, such as system...
GHSA-CXGW-R5JG-7XWQ Code injection in grav
Grav is vulnerable to Server Side Template Injection via Twig. According to a previous vulnerability report, Twig should not render dangerous functions by default, such as system...
CVE-2022-2073
Code Injection in GitHub repository getgrav/grav prior to 1.7.34...
CVE-2022-2073
Code Injection in GitHub repository getgrav/grav prior to 1.7.34...
Code injection
Code Injection in GitHub repository getgrav/grav prior to 1.7.34...
CVE-2022-2073
CVE-2022-2073 is a Grav SSTI vulnerability in getgrav/grav prior to 1.7.34 where the Twig filter function could be abused to trigger unsafe calls. Grav patched filter() in 1.7.34, but attackers could still abuse other Twig core filters (e.g., map/reduce) to reach remote code execution unless thos...
