Lucene search
Veracode Vulnerability DatabaseVERACODE:36212HistoryJun 30, 2022 - 5:21 a.m.
Remote Code Execution
2022-06-3005:21:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
27
0.001 Low
EPSS
Percentile
41.3%
getgrav/grav is vulnerable to remote code execution. An authenticated remote attacker is able to cause server side template injection via Twig which renders risky functions by default, such as system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| getgrav/grav | le | 1.7.33 | |
| getgrav/grav | le | 1.7.33 |
Related
github
github
Code injection in grav
2022-06-30 00:00:29
Grav Server-side Template Injection (SSTI) via Twig Default Filters
2023-06-16 19:37:08
Grav Server-side Template Injection (SSTI) via Twig Default Filters
2023-06-16 19:36:39
osv
osv
Code injection in grav
2022-06-30 00:00:29
CVE-2022-2073
2022-06-29 19:15:09
CVE-2023-34448
2023-06-14 23:15:11
huntr
huntr
Server Side Template Injection
2022-04-07 21:45:14
cve
cve
CVE-2022-2073
2022-06-29 19:15:09
CVE-2023-34448
2023-06-14 23:15:11
cvelist
cvelist
CVE-2022-2073 Code Injection in getgrav/grav
2022-06-29 18:20:11
nvd
nvd
CVE-2022-2073
2022-06-29 19:15:09
CVE-2023-34448
2023-06-14 23:15:11
prion
prion
Code injection
2022-06-29 19:15:00
Design/Logic Flaw
2023-06-14 23:15:00
veracode
veracode
Server-side Template Injection(SSTI)
2023-06-21 07:09:56