6 matches found
Grav < 1.7 - Open Redirect
Grav before 1.7 has an open redirect vulnerability via common/Grav.php. This is partially fixed in 1.6.23 and still present in 1.6.x. id: CVE-2020-11529 info: name: Grav 1.7 - Open Redirect author: 0xAkoko severity: medium description: Grav before 1.7 has an open redirect vulnerability via...
Open Redirect
getgrav/grav is vulnerable to open redirect. The vulnerability exists because the function redirect in Common/Grav.php does not validate the internal route parameter route and redirect to another location, allowing attackers to provide a malicious route to a location or file...
CVE-2020-11529
Common/Grav.php in Grav before 1.7 has an Open Redirect. This is partially fixed in 1.6.23 and still present in 1.6.x...
CVE-2020-11529
Common/Grav.php in Grav before 1.7 has an Open Redirect. This is partially fixed in 1.6.23 and still present in 1.6.x...
PT-2020-12666
Name of the Vulnerable Software and Affected Versions Grav versions prior to 1.7 Grav versions 1.6.x except 1.6.23 and later Description The issue is related to an Open Redirect in the Common/Grav.php file. This problem is partially fixed in version 1.6.23 but still exists in other 1.6.x versions...
