CVE-2026-78851

Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method...

EUVD-2026-102184

Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method...

CVE-2026-78851

A Directory Traversal vulnerability exists in Grav CMS versions 2.0.3 through 2.0.6 . The issue stems from the mediaDirFunc method within GravExtension.php, which is exposed through the page-content Twig sandbox allowlist via the media_directory() function. Because the system fails to perform can...

CVE-2026-78851

Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method...