Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-2073

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-cxgw-r5jg-7xwq

Code injection in grav Grav is vulnerable to Server Side Template Injection via Twig. According to a previous vulnerability report, Twig should not render dangerous functions by default, such as system.

gitlab/packagist/getgrav/grav/CVE-2022-2073

Code injection in grav Code Injection in GitHub repository getgrav/grav prior to 1.7.34.