{"url":"http://public2.vulnerablecode.io/api/packages/77634?format=json","purl":"pkg:composer/getgrav/grav@1.7.0-rc.17","type":"composer","namespace":"getgrav","name":"grav","version":"1.7.0-rc.17","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"2.0.0-beta.2","latest_non_vulnerable_version":"2.0.0-rc.2","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/21855?format=json","vulnerability_id":"VCID-19nj-98jv-77ah","summary":"Grav is vulnerable to Stored XSS through authenticated user-edited content\ngrav before v1.7.49.5 has a Stored Cross-Site Scripting (Stored XSS) vulnerability in the page editing functionality. An authenticated low-privileged user with permission to edit content can inject malicious JavaScript payloads into editable fields. The payload is stored on the server and later executed when any other user views or edits the affected page.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-66843","reference_id":"","reference_type":"","scores":[{"value":"0.00026","scoring_system":"epss","scoring_elements":"0.0781","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-66843"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://github.com/Yohane-Mashiro/grav_cve/issues/1","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-16T17:33:18Z/"}],"url":"https://github.com/Yohane-Mashiro/grav_cve/issues/1"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66843","reference_id":"CVE-2025-66843","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66843"},{"reference_url":"https://github.com/advisories/GHSA-mh85-44c2-3m97","reference_id":"GHSA-mh85-44c2-3m97","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-mh85-44c2-3m97"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/858632?format=json","purl":"pkg:composer/getgrav/grav@1.8.0-beta.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4jar-dkfg-73cj"},{"vulnerability":"VCID-56q7-vxfn-1fdh"},{"vulnerability":"VCID-6d91-btd1-g7fm"},{"vulnerability":"VCID-6u43-vkkb-vydt"},{"vulnerability":"VCID-7wp3-csun-8khc"},{"vulnerability":"VCID-85xt-1hrm-7yan"},{"vulnerability":"VCID-bhy6-j9pb-dfhs"},{"vulnerability":"VCID-dbkc-wpyr-7bcx"},{"vulnerability":"VCID-fc3k-zc91-pubu"},{"vulnerability":"VCID-fwqy-uxhw-r3h6"},{"vulnerability":"VCID-g3hx-7nzv-ryhx"},{"vulnerability":"VCID-g8ke-p3q5-qyg5"},{"vulnerability":"VCID-gmdx-e7d2-sqba"},{"vulnerability":"VCID-j5pg-v7n5-c3ah"},{"vulnerability":"VCID-jjf3-4p3w-6keh"},{"vulnerability":"VCID-kagw-a2bj-fbec"},{"vulnerability":"VCID-tfvd-w5cn-jug5"},{"vulnerability":"VCID-xny2-wxag-1qds"},{"vulnerability":"VCID-yj5w-gv1w-c7gp"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.8.0-beta.1"}],"aliases":["CVE-2025-66843","GHSA-mh85-44c2-3m97"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-19nj-98jv-77ah"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/196273?format=json","vulnerability_id":"VCID-1bjq-3mkn-zyga","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-2073","reference_id":"","reference_type":"","scores":[{"value":"0.00213","scoring_system":"epss","scoring_elements":"0.43839","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-2073"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://github.com/getgrav/grav/commit/9d6a2dba09fd4e56f5cdfb9a399caea355bfeb83","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav/commit/9d6a2dba09fd4e56f5cdfb9a399caea355bfeb83"},{"reference_url":"https://huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2073","reference_id":"CVE-2022-2073","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2073"},{"reference_url":"https://github.com/advisories/GHSA-cxgw-r5jg-7xwq","reference_id":"GHSA-cxgw-r5jg-7xwq","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-cxgw-r5jg-7xwq"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/78410?format=json","purl":"pkg:composer/getgrav/grav@1.7.34","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-19nj-98jv-77ah"},{"vulnerability":"VCID-2wpd-95xv-6kde"},{"vulnerability":"VCID-2ye1-e9dh-1bay"},{"vulnerability":"VCID-44z6-1fhy-tydk"},{"vulnerability":"VCID-4jar-dkfg-73cj"},{"vulnerability":"VCID-56q7-vxfn-1fdh"},{"vulnerability":"VCID-5u55-gd8a-u3ec"},{"vulnerability":"VCID-6d91-btd1-g7fm"},{"vulnerability":"VCID-6u43-vkkb-vydt"},{"vulnerability":"VCID-7wp3-csun-8khc"},{"vulnerability":"VCID-85xt-1hrm-7yan"},{"vulnerability":"VCID-8vcs-7bzg-v7a1"},{"vulnerability":"VCID-az1h-2gqk-qfet"},{"vulnerability":"VCID-bhy6-j9pb-dfhs"},{"vulnerability":"VCID-bren-f4n9-cyhk"},{"vulnerability":"VCID-dbkc-wpyr-7bcx"},{"vulnerability":"VCID-fc3k-zc91-pubu"},{"vulnerability":"VCID-fwqy-uxhw-r3h6"},{"vulnerability":"VCID-g3hx-7nzv-ryhx"},{"vulnerability":"VCID-g8ke-p3q5-qyg5"},{"vulnerability":"VCID-gmdx-e7d2-sqba"},{"vulnerability":"VCID-j5pg-v7n5-c3ah"},{"vulnerability":"VCID-jjf3-4p3w-6keh"},{"vulnerability":"VCID-kagw-a2bj-fbec"},{"vulnerability":"VCID-pez8-dv55-yuhx"},{"vulnerability":"VCID-qx77-ytdb-v7fm"},{"vulnerability":"VCID-rc74-mh6y-abez"},{"vulnerability":"VCID-rejj-7zwj-pya6"},{"vulnerability":"VCID-rpt5-58d4-u3g2"},{"vulnerability":"VCID-s1my-pw99-bya8"},{"vulnerability":"VCID-tfvd-w5cn-jug5"},{"vulnerability":"VCID-ue9g-26at-mqbe"},{"vulnerability":"VCID-vr9g-tuvu-5bfr"},{"vulnerability":"VCID-xny2-wxag-1qds"},{"vulnerability":"VCID-yj5w-gv1w-c7gp"},{"vulnerability":"VCID-zh46-yhnw-3uek"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.7.34"}],"aliases":["CVE-2022-2073","GHSA-cxgw-r5jg-7xwq"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1bjq-3mkn-zyga"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/15160?format=json","vulnerability_id":"VCID-2qtw-9wf6-nudj","summary":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-0743","reference_id":"","reference_type":"","scores":[{"value":"0.00281","scoring_system":"epss","scoring_elements":"0.51728","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-0743"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://github.com/getgrav/grav/commit/3dd0cabeac9835fe64dcb4b68c658b39f1f6be2f","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav/commit/3dd0cabeac9835fe64dcb4b68c658b39f1f6be2f"},{"reference_url":"https://huntr.dev/bounties/32ea4ddb-5b41-4bf9-b5a1-ef455fe2d293","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/32ea4ddb-5b41-4bf9-b5a1-ef455fe2d293"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0743","reference_id":"CVE-2022-0743","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0743"},{"reference_url":"https://github.com/advisories/GHSA-2p89-ppc2-mrq4","reference_id":"GHSA-2p89-ppc2-mrq4","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-2p89-ppc2-mrq4"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/59813?format=json","purl":"pkg:composer/getgrav/grav@1.7.31","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-19nj-98jv-77ah"},{"vulnerability":"VCID-1bjq-3mkn-zyga"},{"vulnerability":"VCID-2wpd-95xv-6kde"},{"vulnerability":"VCID-2ye1-e9dh-1bay"},{"vulnerability":"VCID-44z6-1fhy-tydk"},{"vulnerability":"VCID-4jar-dkfg-73cj"},{"vulnerability":"VCID-56q7-vxfn-1fdh"},{"vulnerability":"VCID-5u55-gd8a-u3ec"},{"vulnerability":"VCID-6d91-btd1-g7fm"},{"vulnerability":"VCID-6u43-vkkb-vydt"},{"vulnerability":"VCID-7wp3-csun-8khc"},{"vulnerability":"VCID-85xt-1hrm-7yan"},{"vulnerability":"VCID-8vcs-7bzg-v7a1"},{"vulnerability":"VCID-9ae4-j22r-zybf"},{"vulnerability":"VCID-az1h-2gqk-qfet"},{"vulnerability":"VCID-bhy6-j9pb-dfhs"},{"vulnerability":"VCID-bren-f4n9-cyhk"},{"vulnerability":"VCID-dbkc-wpyr-7bcx"},{"vulnerability":"VCID-fc3k-zc91-pubu"},{"vulnerability":"VCID-fwqy-uxhw-r3h6"},{"vulnerability":"VCID-g3hx-7nzv-ryhx"},{"vulnerability":"VCID-g8ke-p3q5-qyg5"},{"vulnerability":"VCID-gmdx-e7d2-sqba"},{"vulnerability":"VCID-j5pg-v7n5-c3ah"},{"vulnerability":"VCID-jjf3-4p3w-6keh"},{"vulnerability":"VCID-kagw-a2bj-fbec"},{"vulnerability":"VCID-pez8-dv55-yuhx"},{"vulnerability":"VCID-qx77-ytdb-v7fm"},{"vulnerability":"VCID-rc74-mh6y-abez"},{"vulnerability":"VCID-rejj-7zwj-pya6"},{"vulnerability":"VCID-rpt5-58d4-u3g2"},{"vulnerability":"VCID-s1my-pw99-bya8"},{"vulnerability":"VCID-tfvd-w5cn-jug5"},{"vulnerability":"VCID-ue9g-26at-mqbe"},{"vulnerability":"VCID-vr9g-tuvu-5bfr"},{"vulnerability":"VCID-xny2-wxag-1qds"},{"vulnerability":"VCID-yj5w-gv1w-c7gp"},{"vulnerability":"VCID-zh46-yhnw-3uek"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.7.31"}],"aliases":["CVE-2022-0743","GHSA-2p89-ppc2-mrq4"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2qtw-9wf6-nudj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/19403?format=json","vulnerability_id":"VCID-2wpd-95xv-6kde","summary":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nA cross-site scripting (XSS) vulnerability in Grav versions 1.7.44 and before, allows remote authenticated attackers to execute arbitrary web scripts or HTML via the onmouseover attribute of an ISINDEX element.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-31506","reference_id":"","reference_type":"","scores":[{"value":"0.00046","scoring_system":"epss","scoring_elements":"0.14622","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-31506"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://m3n0sd0n4ld.github.io/patoHackventuras/cve-2023-31506","reference_id":"CVE-2023-31506","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-16T17:13:14Z/"}],"url":"https://m3n0sd0n4ld.github.io/patoHackventuras/cve-2023-31506"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31506","reference_id":"CVE-2023-31506","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31506"},{"reference_url":"https://github.com/advisories/GHSA-xrf8-cmrg-7436","reference_id":"GHSA-xrf8-cmrg-7436","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-xrf8-cmrg-7436"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/67656?format=json","purl":"pkg:composer/getgrav/grav@1.7.44","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-19nj-98jv-77ah"},{"vulnerability":"VCID-4jar-dkfg-73cj"},{"vulnerability":"VCID-56q7-vxfn-1fdh"},{"vulnerability":"VCID-5u55-gd8a-u3ec"},{"vulnerability":"VCID-6d91-btd1-g7fm"},{"vulnerability":"VCID-6u43-vkkb-vydt"},{"vulnerability":"VCID-7wp3-csun-8khc"},{"vulnerability":"VCID-85xt-1hrm-7yan"},{"vulnerability":"VCID-az1h-2gqk-qfet"},{"vulnerability":"VCID-bhy6-j9pb-dfhs"},{"vulnerability":"VCID-bren-f4n9-cyhk"},{"vulnerability":"VCID-dbkc-wpyr-7bcx"},{"vulnerability":"VCID-fc3k-zc91-pubu"},{"vulnerability":"VCID-fwqy-uxhw-r3h6"},{"vulnerability":"VCID-g3hx-7nzv-ryhx"},{"vulnerability":"VCID-g8ke-p3q5-qyg5"},{"vulnerability":"VCID-gmdx-e7d2-sqba"},{"vulnerability":"VCID-j5pg-v7n5-c3ah"},{"vulnerability":"VCID-jjf3-4p3w-6keh"},{"vulnerability":"VCID-kagw-a2bj-fbec"},{"vulnerability":"VCID-pez8-dv55-yuhx"},{"vulnerability":"VCID-rc74-mh6y-abez"},{"vulnerability":"VCID-rejj-7zwj-pya6"},{"vulnerability":"VCID-s1my-pw99-bya8"},{"vulnerability":"VCID-tfvd-w5cn-jug5"},{"vulnerability":"VCID-ue9g-26at-mqbe"},{"vulnerability":"VCID-vr9g-tuvu-5bfr"},{"vulnerability":"VCID-xny2-wxag-1qds"},{"vulnerability":"VCID-yj5w-gv1w-c7gp"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.7.44"}],"aliases":["CVE-2023-31506","GHSA-xrf8-cmrg-7436"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2wpd-95xv-6kde"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/17848?format=json","vulnerability_id":"VCID-2ye1-e9dh-1bay","summary":"Improper Control of Generation of Code ('Code Injection')\nGrav is a file-based Web platform. Prior to version 1.7.42, the denylist introduced in commit 9d6a2d to prevent dangerous functions from being executed via injection of malicious templates was insufficient and could be easily subverted in multiple ways -- (1) using unsafe functions that are not banned, (2) using capitalised callable names, and (3) using fully-qualified names for referencing callables. Consequently, a low privileged attacker with login access to Grav Admin panel and page creation/update permissions is able to inject malicious templates to obtain remote code execution. A patch in version 1.7.42 improves the denylist.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-34253","reference_id":"","reference_type":"","scores":[{"value":"0.02104","scoring_system":"epss","scoring_elements":"0.84365","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-34253"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://github.com/getgrav/grav/blob/1.7.40/system/src/Grav/Common/Utils.php#L1952-L2190","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-12-18T21:39:27Z/"}],"url":"https://github.com/getgrav/grav/blob/1.7.40/system/src/Grav/Common/Utils.php#L1952-L2190"},{"reference_url":"https://github.com/getgrav/grav/commit/244758d4383034fe4cd292d41e477177870b65ec","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav/commit/244758d4383034fe4cd292d41e477177870b65ec"},{"reference_url":"https://github.com/getgrav/grav/commit/71bbed12f950de8335006d7f91112263d8504f1b","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-12-18T21:39:27Z/"}],"url":"https://github.com/getgrav/grav/commit/71bbed12f950de8335006d7f91112263d8504f1b"},{"reference_url":"https://github.com/getgrav/grav/commit/8c2c1cb72611a399f13423fc6d0e1d998c03e5c8","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav/commit/8c2c1cb72611a399f13423fc6d0e1d998c03e5c8"},{"reference_url":"https://github.com/getgrav/grav/commit/9d01140a63c77075ef09b26ef57cf186138151a5","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav/commit/9d01140a63c77075ef09b26ef57cf186138151a5"},{"reference_url":"https://huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66"},{"reference_url":"https://huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66/","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-12-18T21:39:27Z/"}],"url":"https://huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66/"},{"reference_url":"https://www.github.com/getgrav/grav/commit/9d6a2dba09fd4e56f5cdfb9a399caea355bfeb83","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-12-18T21:39:27Z/"}],"url":"https://www.github.com/getgrav/grav/commit/9d6a2dba09fd4e56f5cdfb9a399caea355bfeb83"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34253","reference_id":"CVE-2023-34253","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34253"},{"reference_url":"https://github.com/advisories/GHSA-j3v8-v77f-fvgm","reference_id":"GHSA-j3v8-v77f-fvgm","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-j3v8-v77f-fvgm"},{"reference_url":"https://github.com/getgrav/grav/security/advisories/GHSA-j3v8-v77f-fvgm","reference_id":"GHSA-j3v8-v77f-fvgm","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-12-18T21:39:27Z/"}],"url":"https://github.com/getgrav/grav/security/advisories/GHSA-j3v8-v77f-fvgm"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/64406?format=json","purl":"pkg:composer/getgrav/grav@1.7.42","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-19nj-98jv-77ah"},{"vulnerability":"VCID-2wpd-95xv-6kde"},{"vulnerability":"VCID-4jar-dkfg-73cj"},{"vulnerability":"VCID-56q7-vxfn-1fdh"},{"vulnerability":"VCID-5u55-gd8a-u3ec"},{"vulnerability":"VCID-6d91-btd1-g7fm"},{"vulnerability":"VCID-6u43-vkkb-vydt"},{"vulnerability":"VCID-7wp3-csun-8khc"},{"vulnerability":"VCID-85xt-1hrm-7yan"},{"vulnerability":"VCID-az1h-2gqk-qfet"},{"vulnerability":"VCID-bhy6-j9pb-dfhs"},{"vulnerability":"VCID-bren-f4n9-cyhk"},{"vulnerability":"VCID-dbkc-wpyr-7bcx"},{"vulnerability":"VCID-fc3k-zc91-pubu"},{"vulnerability":"VCID-fwqy-uxhw-r3h6"},{"vulnerability":"VCID-g3hx-7nzv-ryhx"},{"vulnerability":"VCID-g8ke-p3q5-qyg5"},{"vulnerability":"VCID-gmdx-e7d2-sqba"},{"vulnerability":"VCID-j5pg-v7n5-c3ah"},{"vulnerability":"VCID-jjf3-4p3w-6keh"},{"vulnerability":"VCID-kagw-a2bj-fbec"},{"vulnerability":"VCID-pez8-dv55-yuhx"},{"vulnerability":"VCID-rc74-mh6y-abez"},{"vulnerability":"VCID-rejj-7zwj-pya6"},{"vulnerability":"VCID-rpt5-58d4-u3g2"},{"vulnerability":"VCID-s1my-pw99-bya8"},{"vulnerability":"VCID-tfvd-w5cn-jug5"},{"vulnerability":"VCID-ue9g-26at-mqbe"},{"vulnerability":"VCID-vr9g-tuvu-5bfr"},{"vulnerability":"VCID-xny2-wxag-1qds"},{"vulnerability":"VCID-yj5w-gv1w-c7gp"},{"vulnerability":"VCID-zh46-yhnw-3uek"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.7.42"}],"aliases":["CVE-2023-34253","GHSA-j3v8-v77f-fvgm"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2ye1-e9dh-1bay"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/17843?format=json","vulnerability_id":"VCID-44z6-1fhy-tydk","summary":"Improper Control of Generation of Code ('Code Injection')\nGrav is a file-based Web platform. Prior to version 1.7.42, there is a logic flaw in the `GravExtension.filterFilter()` function whereby validation against a denylist of unsafe functions is only performed when the argument passed to filter is a string. However, passing an array as a callable argument allows the validation check to be skipped. Consequently, a low privileged attacker with login access to Grav Admin panel and page creation/update permissions is able to inject malicious templates to obtain remote code execution. The vulnerability can be found in the `GravExtension.filterFilter()` function declared in `/system/src/Grav/Common/Twig/Extension/GravExtension.php`. Version 1.7.42 contains a patch for this issue. End users should also ensure that `twig.undefined_functions` and `twig.undefined_filters` properties in `/path/to/webroot/system/config/system.yaml` configuration file are set to `false` to disallow Twig from treating undefined filters/functions as PHP functions and executing them.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-34252","reference_id":"","reference_type":"","scores":[{"value":"0.00529","scoring_system":"epss","scoring_elements":"0.67473","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-34252"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://github.com/getgrav/grav/blob/1.7.40/system/src/Grav/Common/Twig/Extension/GravExtension.php#L1692-L1698","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-12-18T19:02:44Z/"}],"url":"https://github.com/getgrav/grav/blob/1.7.40/system/src/Grav/Common/Twig/Extension/GravExtension.php#L1692-L1698"},{"reference_url":"https://github.com/getgrav/grav/blob/1.7.40/system/src/Grav/Common/Utils.php#L1956-L2074","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-12-18T19:02:44Z/"}],"url":"https://github.com/getgrav/grav/blob/1.7.40/system/src/Grav/Common/Utils.php#L1956-L2074"},{"reference_url":"https://github.com/getgrav/grav/commit/244758d4383034fe4cd292d41e477177870b65ec","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-12-18T19:02:44Z/"}],"url":"https://github.com/getgrav/grav/commit/244758d4383034fe4cd292d41e477177870b65ec"},{"reference_url":"https://github.com/getgrav/grav/commit/71bbed12f950de8335006d7f91112263d8504f1b","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav/commit/71bbed12f950de8335006d7f91112263d8504f1b"},{"reference_url":"https://github.com/getgrav/grav/commit/8c2c1cb72611a399f13423fc6d0e1d998c03e5c8","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav/commit/8c2c1cb72611a399f13423fc6d0e1d998c03e5c8"},{"reference_url":"https://github.com/getgrav/grav/commit/9d01140a63c77075ef09b26ef57cf186138151a5","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav/commit/9d01140a63c77075ef09b26ef57cf186138151a5"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34252","reference_id":"CVE-2023-34252","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34252"},{"reference_url":"https://github.com/advisories/GHSA-96xv-rmwj-6p9w","reference_id":"GHSA-96xv-rmwj-6p9w","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-96xv-rmwj-6p9w"},{"reference_url":"https://github.com/getgrav/grav/security/advisories/GHSA-96xv-rmwj-6p9w","reference_id":"GHSA-96xv-rmwj-6p9w","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-12-18T19:02:44Z/"}],"url":"https://github.com/getgrav/grav/security/advisories/GHSA-96xv-rmwj-6p9w"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/64406?format=json","purl":"pkg:composer/getgrav/grav@1.7.42","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-19nj-98jv-77ah"},{"vulnerability":"VCID-2wpd-95xv-6kde"},{"vulnerability":"VCID-4jar-dkfg-73cj"},{"vulnerability":"VCID-56q7-vxfn-1fdh"},{"vulnerability":"VCID-5u55-gd8a-u3ec"},{"vulnerability":"VCID-6d91-btd1-g7fm"},{"vulnerability":"VCID-6u43-vkkb-vydt"},{"vulnerability":"VCID-7wp3-csun-8khc"},{"vulnerability":"VCID-85xt-1hrm-7yan"},{"vulnerability":"VCID-az1h-2gqk-qfet"},{"vulnerability":"VCID-bhy6-j9pb-dfhs"},{"vulnerability":"VCID-bren-f4n9-cyhk"},{"vulnerability":"VCID-dbkc-wpyr-7bcx"},{"vulnerability":"VCID-fc3k-zc91-pubu"},{"vulnerability":"VCID-fwqy-uxhw-r3h6"},{"vulnerability":"VCID-g3hx-7nzv-ryhx"},{"vulnerability":"VCID-g8ke-p3q5-qyg5"},{"vulnerability":"VCID-gmdx-e7d2-sqba"},{"vulnerability":"VCID-j5pg-v7n5-c3ah"},{"vulnerability":"VCID-jjf3-4p3w-6keh"},{"vulnerability":"VCID-kagw-a2bj-fbec"},{"vulnerability":"VCID-pez8-dv55-yuhx"},{"vulnerability":"VCID-rc74-mh6y-abez"},{"vulnerability":"VCID-rejj-7zwj-pya6"},{"vulnerability":"VCID-rpt5-58d4-u3g2"},{"vulnerability":"VCID-s1my-pw99-bya8"},{"vulnerability":"VCID-tfvd-w5cn-jug5"},{"vulnerability":"VCID-ue9g-26at-mqbe"},{"vulnerability":"VCID-vr9g-tuvu-5bfr"},{"vulnerability":"VCID-xny2-wxag-1qds"},{"vulnerability":"VCID-yj5w-gv1w-c7gp"},{"vulnerability":"VCID-zh46-yhnw-3uek"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.7.42"}],"aliases":["CVE-2023-34252","GHSA-96xv-rmwj-6p9w"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-44z6-1fhy-tydk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/21727?format=json","vulnerability_id":"VCID-4jar-dkfg-73cj","summary":"Grav is Vulnerable to Security Sandbox Bypass with SSTI (Server Side Template Injection)\nGrav CMS is vulnerable to a Server-Side Template Injection (SSTI) that allows any authenticated user with editor permissions to execute arbitrary code on the remote server, bypassing the existing security sandbox.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-66299","reference_id":"","reference_type":"","scores":[{"value":"0.00154","scoring_system":"epss","scoring_elements":"0.35776","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-66299"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-02T14:07:46Z/"}],"url":"https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66299","reference_id":"CVE-2025-66299","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66299"},{"reference_url":"https://github.com/advisories/GHSA-gjc5-8cfh-653x","reference_id":"GHSA-gjc5-8cfh-653x","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-gjc5-8cfh-653x"},{"reference_url":"https://github.com/getgrav/grav/security/advisories/GHSA-gjc5-8cfh-653x","reference_id":"GHSA-gjc5-8cfh-653x","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-02T14:07:46Z/"}],"url":"https://github.com/getgrav/grav/security/advisories/GHSA-gjc5-8cfh-653x"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/71488?format=json","purl":"pkg:composer/getgrav/grav@1.8.0-beta.27","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g8ke-p3q5-qyg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.8.0-beta.27"}],"aliases":["CVE-2025-66299","GHSA-gjc5-8cfh-653x"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4jar-dkfg-73cj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/21740?format=json","vulnerability_id":"VCID-56q7-vxfn-1fdh","summary":"Grav Admin Plugin vulnerable to User Enumeration & Email Disclosure\nA **user enumeration and email disclosure vulnerability** exists in Grav **v1.7.49.5** with Admin plugin **v1.10.49.1**.\nThe \"Forgot Password\" functionality at `/admin/forgot` leaks information about valid usernames and their associated email addresses through distinct server responses.\nThis allows an attacker to enumerate users and disclose sensitive email addresses, which can be leveraged for targeted attacks such as password spraying, phishing, or social engineering.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-66307","reference_id":"","reference_type":"","scores":[{"value":"0.00059","scoring_system":"epss","scoring_elements":"0.18696","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-66307"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://github.com/getgrav/grav-plugin-admin/blob/6d673fc7c4f6962756f93ae651371e81f7f20924/classes/plugin/Controllers/Login/LoginController.php#L349","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav-plugin-admin/blob/6d673fc7c4f6962756f93ae651371e81f7f20924/classes/plugin/Controllers/Login/LoginController.php#L349"},{"reference_url":"https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-02T20:07:49Z/"}],"url":"https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66307","reference_id":"CVE-2025-66307","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66307"},{"reference_url":"https://github.com/advisories/GHSA-q3qx-cp62-f6m7","reference_id":"GHSA-q3qx-cp62-f6m7","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-q3qx-cp62-f6m7"},{"reference_url":"https://github.com/getgrav/grav/security/advisories/GHSA-q3qx-cp62-f6m7","reference_id":"GHSA-q3qx-cp62-f6m7","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-02T20:07:49Z/"}],"url":"https://github.com/getgrav/grav/security/advisories/GHSA-q3qx-cp62-f6m7"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/71488?format=json","purl":"pkg:composer/getgrav/grav@1.8.0-beta.27","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g8ke-p3q5-qyg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.8.0-beta.27"}],"aliases":["CVE-2025-66307","GHSA-q3qx-cp62-f6m7"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-56q7-vxfn-1fdh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/256507?format=json","vulnerability_id":"VCID-5u55-gd8a-u3ec","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2024-35498","reference_id":"","reference_type":"","scores":[{"value":"0.00152","scoring_system":"epss","scoring_elements":"0.3561","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-35498"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"2.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://github.com/r4vanan/Stored-xss-Grav-v1.7.45","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-07T15:42:33Z/"}],"url":"https://github.com/r4vanan/Stored-xss-Grav-v1.7.45"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-35498","reference_id":"","reference_type":"","scores":[{"value":"2.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-35498"},{"reference_url":"https://r4vanan.medium.com/a-quick-dive-into-xss-vulnerability-in-grav-cms-v1-7-45-cve-2024-35498-fc236b7d74a0","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"2.0","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-07T15:42:33Z/"}],"url":"https://r4vanan.medium.com/a-quick-dive-into-xss-vulnerability-in-grav-cms-v1-7-45-cve-2024-35498-fc236b7d74a0"},{"reference_url":"https://github.com/advisories/GHSA-m78c-qx99-mvw9","reference_id":"GHSA-m78c-qx99-mvw9","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-m78c-qx99-mvw9"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/81166?format=json","purl":"pkg:composer/getgrav/grav@1.7.46","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-19nj-98jv-77ah"},{"vulnerability":"VCID-4jar-dkfg-73cj"},{"vulnerability":"VCID-56q7-vxfn-1fdh"},{"vulnerability":"VCID-6d91-btd1-g7fm"},{"vulnerability":"VCID-6u43-vkkb-vydt"},{"vulnerability":"VCID-7wp3-csun-8khc"},{"vulnerability":"VCID-85xt-1hrm-7yan"},{"vulnerability":"VCID-az1h-2gqk-qfet"},{"vulnerability":"VCID-bhy6-j9pb-dfhs"},{"vulnerability":"VCID-dbkc-wpyr-7bcx"},{"vulnerability":"VCID-fc3k-zc91-pubu"},{"vulnerability":"VCID-fwqy-uxhw-r3h6"},{"vulnerability":"VCID-g3hx-7nzv-ryhx"},{"vulnerability":"VCID-g8ke-p3q5-qyg5"},{"vulnerability":"VCID-gmdx-e7d2-sqba"},{"vulnerability":"VCID-j5pg-v7n5-c3ah"},{"vulnerability":"VCID-jjf3-4p3w-6keh"},{"vulnerability":"VCID-kagw-a2bj-fbec"},{"vulnerability":"VCID-tfvd-w5cn-jug5"},{"vulnerability":"VCID-ue9g-26at-mqbe"},{"vulnerability":"VCID-xny2-wxag-1qds"},{"vulnerability":"VCID-yj5w-gv1w-c7gp"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.7.46"}],"aliases":["CVE-2024-35498","GHSA-m78c-qx99-mvw9"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5u55-gd8a-u3ec"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/21742?format=json","vulnerability_id":"VCID-6d91-btd1-g7fm","summary":"Grav vulnerable to Information Disclosure via IDOR in Grav Admin Panel\nAn **IDOR (Insecure Direct Object Reference)** vulnerability in the Grav CMS Admin Panel allows **low-privilege users to access sensitive information** from other accounts.\nAlthough direct account takeover is not possible, **admin email addresses and other metadata can be exposed**, increasing the risk of phishing, credential stuffing, and social engineering.\n\n---","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-66306","reference_id":"","reference_type":"","scores":[{"value":"0.00045","scoring_system":"epss","scoring_elements":"0.14217","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-66306"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://github.com/getgrav/grav/commit/b7e1958a6e807ac14919447b60e5204a2ea77f62","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-02T20:11:21Z/"}],"url":"https://github.com/getgrav/grav/commit/b7e1958a6e807ac14919447b60e5204a2ea77f62"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66306","reference_id":"CVE-2025-66306","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66306"},{"reference_url":"https://github.com/advisories/GHSA-4cwq-j7jv-qmwg","reference_id":"GHSA-4cwq-j7jv-qmwg","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-4cwq-j7jv-qmwg"},{"reference_url":"https://github.com/getgrav/grav/security/advisories/GHSA-4cwq-j7jv-qmwg","reference_id":"GHSA-4cwq-j7jv-qmwg","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-02T20:11:21Z/"}],"url":"https://github.com/getgrav/grav/security/advisories/GHSA-4cwq-j7jv-qmwg"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/71488?format=json","purl":"pkg:composer/getgrav/grav@1.8.0-beta.27","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g8ke-p3q5-qyg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.8.0-beta.27"}],"aliases":["CVE-2025-66306","GHSA-4cwq-j7jv-qmwg"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6d91-btd1-g7fm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/21708?format=json","vulnerability_id":"VCID-6u43-vkkb-vydt","summary":"Grav is vulnerable to Arbitrary File Read\n- A low privilege user account with page editing privilege can read any server files using \"Frontmatter\" form.\n- This includes Grav user account files - /grav/user/accounts/*.yaml. This file stores hashed user password, 2FA secret, and the password reset token.\n- This can allow an adversary to compromise any registered account by resetting a password for a user to get access to the password reset token from the file or by cracking the hashed password.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-66300","reference_id":"","reference_type":"","scores":[{"value":"0.00073","scoring_system":"epss","scoring_elements":"0.22332","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-66300"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"8.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://github.com/getgrav/grav/commit/ed640a13143c4177af013cf001969ed2c5e197ee","reference_id":"","reference_type":"","scores":[{"value":"8.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-02T14:08:33Z/"}],"url":"https://github.com/getgrav/grav/commit/ed640a13143c4177af013cf001969ed2c5e197ee"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66300","reference_id":"CVE-2025-66300","reference_type":"","scores":[{"value":"8.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66300"},{"reference_url":"https://github.com/advisories/GHSA-p4ww-mcp9-j6f2","reference_id":"GHSA-p4ww-mcp9-j6f2","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-p4ww-mcp9-j6f2"},{"reference_url":"https://github.com/getgrav/grav/security/advisories/GHSA-p4ww-mcp9-j6f2","reference_id":"GHSA-p4ww-mcp9-j6f2","reference_type":"","scores":[{"value":"8.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-02T14:08:33Z/"}],"url":"https://github.com/getgrav/grav/security/advisories/GHSA-p4ww-mcp9-j6f2"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/71488?format=json","purl":"pkg:composer/getgrav/grav@1.8.0-beta.27","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g8ke-p3q5-qyg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.8.0-beta.27"}],"aliases":["CVE-2025-66300","GHSA-p4ww-mcp9-j6f2"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6u43-vkkb-vydt"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/21743?format=json","vulnerability_id":"VCID-7wp3-csun-8khc","summary":"Grav has Broken Access Control which allows an Editor to modify the page's YAML Frontmatter to alter form processing actions\nDue to a broken access control vulnerability in the `/admin/pages/{page_name}` endpoint, an editor ( user with full permissions to pages ) can change the functionality of a form after submission.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-66301","reference_id":"","reference_type":"","scores":[{"value":"0.29124","scoring_system":"epss","scoring_elements":"0.96665","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-66301"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66301","reference_id":"CVE-2025-66301","reference_type":"","scores":[{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66301"},{"reference_url":"https://github.com/advisories/GHSA-v8x2-fjv7-8hjh","reference_id":"GHSA-v8x2-fjv7-8hjh","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-v8x2-fjv7-8hjh"},{"reference_url":"https://github.com/getgrav/grav/security/advisories/GHSA-v8x2-fjv7-8hjh","reference_id":"GHSA-v8x2-fjv7-8hjh","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"8.6","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-02T16:26:05Z/"}],"url":"https://github.com/getgrav/grav/security/advisories/GHSA-v8x2-fjv7-8hjh"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/71488?format=json","purl":"pkg:composer/getgrav/grav@1.8.0-beta.27","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g8ke-p3q5-qyg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.8.0-beta.27"}],"aliases":["CVE-2025-66301","GHSA-v8x2-fjv7-8hjh"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7wp3-csun-8khc"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/21720?format=json","vulnerability_id":"VCID-85xt-1hrm-7yan","summary":"Grav Exposes Password Hashes Leading to privilege escalation\n# Exposure of Password Hashes Leading to privilege escalation\n**Severity Rating:** Medium \n\n**Vector:** Privilege Escalation\n\n**CVE:** XXX\n\n**CWE:** 200 - Exposure of Sensitive Information\n\n**CVSS Score:** 6.2\n\n**CVSS Vector:** CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L\n\n## Analysis\n\nIt was observed that if a users is given read access on the user account management section of the admin panel can view the password hashes of all users, including the admin user. This exposure can potentially lead to privilege escalation if an attacker can crack these password hashes.\n\nAn attacker with read access can: \n* View and potentially crack the password hashes.\n* Gain administrative access by cracking the admin password hash.\n* Escalate privileges and compromise the entire admin panel.\n\n\n## Proof of Concept\n\n1) Give read access to user accounts to a random user as shown in the following figures:\n ![grav0](https://github.com/user-attachments/assets/020a4b47-e577-49cb-8392-bfb61491199d)\n ![grav2](https://github.com/user-attachments/assets/97fbfc46-c541-4559-9541-2b9b5de86c0e)\n \n\n2) Log in to the admin panel with an account that has read access to user accounts and navigate to the user account management section.\n\n3) Go to the admin profile `http://127.0.0.1/admin/accounts/users/admin`; The password is not display. Try inspecting the page source code as shown in the following figures:\n ![grav2-1](https://github.com/user-attachments/assets/057c9c14-f928-4584-99ae-4939f63dda57)\n \n You can see that it match the hash that is in the admin.yaml file :\n ![Compare to the hash in database of the admin](grav2-2.png)\n \n\n4) Crack the hash as shown in the following figure, the algorithm use here is bcrypt:\n \n![grav3](https://github.com/user-attachments/assets/ec334f80-4b87-4010-a834-cb92704a596e)\n \n\n## Workarounds\nNo workaround is currently known\n\n# Timeline\n**2024-07-24** Issue identified\n\n**2024-09-27** Vendor contacted\n\n\n# About X41 D-Sec GmbH\nX41 is an expert provider for application security services.\nHaving extensive industry experience and expertise in the area of information\nsecurity, a strong core security team of world class security experts enables\nX41 to perform premium security services.\n\nFields of expertise in the area of application security are security centered\ncode reviews, binary reverse engineering and vulnerability discovery.\nCustom research and IT security consulting and support services are core\ncompetencies of X41.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-66304","reference_id":"","reference_type":"","scores":[{"value":"0.00071","scoring_system":"epss","scoring_elements":"0.2173","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-66304"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"6.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://github.com/getgrav/grav/commit/9d11094e4133f059688fad1e00dbe96fb6e3ead7","reference_id":"","reference_type":"","scores":[{"value":"6.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-12-02T20:15:09Z/"}],"url":"https://github.com/getgrav/grav/commit/9d11094e4133f059688fad1e00dbe96fb6e3ead7"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66304","reference_id":"CVE-2025-66304","reference_type":"","scores":[{"value":"6.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66304"},{"reference_url":"https://github.com/advisories/GHSA-gq3g-666w-7h85","reference_id":"GHSA-gq3g-666w-7h85","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-gq3g-666w-7h85"},{"reference_url":"https://github.com/getgrav/grav/security/advisories/GHSA-gq3g-666w-7h85","reference_id":"GHSA-gq3g-666w-7h85","reference_type":"","scores":[{"value":"6.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-12-02T20:15:09Z/"}],"url":"https://github.com/getgrav/grav/security/advisories/GHSA-gq3g-666w-7h85"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/71488?format=json","purl":"pkg:composer/getgrav/grav@1.8.0-beta.27","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g8ke-p3q5-qyg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.8.0-beta.27"}],"aliases":["CVE-2025-66304","GHSA-gq3g-666w-7h85"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-85xt-1hrm-7yan"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/14263?format=json","vulnerability_id":"VCID-86hj-eehc-k3ft","summary":"grav is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3904","reference_id":"","reference_type":"","scores":[{"value":"0.00261","scoring_system":"epss","scoring_elements":"0.49697","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3904"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://github.com/getgrav/grav/commit/afc69a3229bb6fe120b2c1ea27bc6f196ed7284d","reference_id":"","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav/commit/afc69a3229bb6fe120b2c1ea27bc6f196ed7284d"},{"reference_url":"https://huntr.dev/bounties/b1182515-d911-4da9-b4f7-b4c341a62a8d","reference_id":"","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/b1182515-d911-4da9-b4f7-b4c341a62a8d"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3904","reference_id":"CVE-2021-3904","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3904"},{"reference_url":"https://github.com/advisories/GHSA-5jxc-hmqf-3f73","reference_id":"GHSA-5jxc-hmqf-3f73","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-5jxc-hmqf-3f73"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58415?format=json","purl":"pkg:composer/getgrav/grav@1.7.24","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-19nj-98jv-77ah"},{"vulnerability":"VCID-1bjq-3mkn-zyga"},{"vulnerability":"VCID-2qtw-9wf6-nudj"},{"vulnerability":"VCID-2wpd-95xv-6kde"},{"vulnerability":"VCID-2ye1-e9dh-1bay"},{"vulnerability":"VCID-44z6-1fhy-tydk"},{"vulnerability":"VCID-4jar-dkfg-73cj"},{"vulnerability":"VCID-56q7-vxfn-1fdh"},{"vulnerability":"VCID-5u55-gd8a-u3ec"},{"vulnerability":"VCID-6d91-btd1-g7fm"},{"vulnerability":"VCID-6u43-vkkb-vydt"},{"vulnerability":"VCID-7wp3-csun-8khc"},{"vulnerability":"VCID-85xt-1hrm-7yan"},{"vulnerability":"VCID-8vcs-7bzg-v7a1"},{"vulnerability":"VCID-9ae4-j22r-zybf"},{"vulnerability":"VCID-az1h-2gqk-qfet"},{"vulnerability":"VCID-bhy6-j9pb-dfhs"},{"vulnerability":"VCID-bren-f4n9-cyhk"},{"vulnerability":"VCID-dbkc-wpyr-7bcx"},{"vulnerability":"VCID-fc3k-zc91-pubu"},{"vulnerability":"VCID-fwqy-uxhw-r3h6"},{"vulnerability":"VCID-g3hx-7nzv-ryhx"},{"vulnerability":"VCID-g8ke-p3q5-qyg5"},{"vulnerability":"VCID-gmdx-e7d2-sqba"},{"vulnerability":"VCID-j5pg-v7n5-c3ah"},{"vulnerability":"VCID-jjf3-4p3w-6keh"},{"vulnerability":"VCID-kagw-a2bj-fbec"},{"vulnerability":"VCID-pez8-dv55-yuhx"},{"vulnerability":"VCID-qx77-ytdb-v7fm"},{"vulnerability":"VCID-rc74-mh6y-abez"},{"vulnerability":"VCID-rejj-7zwj-pya6"},{"vulnerability":"VCID-rpt5-58d4-u3g2"},{"vulnerability":"VCID-s1my-pw99-bya8"},{"vulnerability":"VCID-sery-jtwk-d7he"},{"vulnerability":"VCID-tfvd-w5cn-jug5"},{"vulnerability":"VCID-ue9g-26at-mqbe"},{"vulnerability":"VCID-vam8-t26t-hbak"},{"vulnerability":"VCID-vj8k-z2e8-w3gw"},{"vulnerability":"VCID-vr9g-tuvu-5bfr"},{"vulnerability":"VCID-xny2-wxag-1qds"},{"vulnerability":"VCID-yj5w-gv1w-c7gp"},{"vulnerability":"VCID-zh46-yhnw-3uek"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.7.24"}],"aliases":["CVE-2021-3904","GHSA-5jxc-hmqf-3f73"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-86hj-eehc-k3ft"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/17852?format=json","vulnerability_id":"VCID-8vcs-7bzg-v7a1","summary":"Improper Control of Generation of Code ('Code Injection')\nGrav is a flat-file content management system. Prior to version 1.7.42, the patch for CVE-2022-2073, a server-side template injection vulnerability in Grav leveraging the default `filter()` function, does not block other built-in functions exposed by Twig's Core Extension that could be used to invoke arbitrary unsafe functions, thereby allowing for remote code execution. A patch in version 1.74.2 overrides the built-in Twig `map()` and `reduce()` filter functions in `system/src/Grav/Common/Twig/Extension/GravExtension.php` to validate the argument passed to the filter in `$arrow`.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-34448","reference_id":"","reference_type":"","scores":[{"value":"0.08847","scoring_system":"epss","scoring_elements":"0.92671","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-34448"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://github.com/getgrav/grav/commit/244758d4383034fe4cd292d41e477177870b65ec","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav/commit/244758d4383034fe4cd292d41e477177870b65ec"},{"reference_url":"https://github.com/getgrav/grav/commit/71bbed12f950de8335006d7f91112263d8504f1b","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav/commit/71bbed12f950de8335006d7f91112263d8504f1b"},{"reference_url":"https://github.com/getgrav/grav/commit/8c2c1cb72611a399f13423fc6d0e1d998c03e5c8","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-12-18T21:38:33Z/"}],"url":"https://github.com/getgrav/grav/commit/8c2c1cb72611a399f13423fc6d0e1d998c03e5c8"},{"reference_url":"https://github.com/getgrav/grav/commit/9d01140a63c77075ef09b26ef57cf186138151a5","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav/commit/9d01140a63c77075ef09b26ef57cf186138151a5"},{"reference_url":"https://github.com/twigphp/Twig/blob/v1.44.7/src/Environment.php#L148","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-12-18T21:38:33Z/"}],"url":"https://github.com/twigphp/Twig/blob/v1.44.7/src/Environment.php#L148"},{"reference_url":"https://huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66"},{"reference_url":"https://huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66/","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-12-18T21:38:33Z/"}],"url":"https://huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66/"},{"reference_url":"https://www.github.com/getgrav/grav/commit/9d6a2dba09fd4e56f5cdfb9a399caea355bfeb83","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-12-18T21:38:33Z/"}],"url":"https://www.github.com/getgrav/grav/commit/9d6a2dba09fd4e56f5cdfb9a399caea355bfeb83"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34448","reference_id":"CVE-2023-34448","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34448"},{"reference_url":"https://github.com/advisories/GHSA-whr7-m3f8-mpm8","reference_id":"GHSA-whr7-m3f8-mpm8","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-whr7-m3f8-mpm8"},{"reference_url":"https://github.com/getgrav/grav/security/advisories/GHSA-whr7-m3f8-mpm8","reference_id":"GHSA-whr7-m3f8-mpm8","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-12-18T21:38:33Z/"}],"url":"https://github.com/getgrav/grav/security/advisories/GHSA-whr7-m3f8-mpm8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/64406?format=json","purl":"pkg:composer/getgrav/grav@1.7.42","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-19nj-98jv-77ah"},{"vulnerability":"VCID-2wpd-95xv-6kde"},{"vulnerability":"VCID-4jar-dkfg-73cj"},{"vulnerability":"VCID-56q7-vxfn-1fdh"},{"vulnerability":"VCID-5u55-gd8a-u3ec"},{"vulnerability":"VCID-6d91-btd1-g7fm"},{"vulnerability":"VCID-6u43-vkkb-vydt"},{"vulnerability":"VCID-7wp3-csun-8khc"},{"vulnerability":"VCID-85xt-1hrm-7yan"},{"vulnerability":"VCID-az1h-2gqk-qfet"},{"vulnerability":"VCID-bhy6-j9pb-dfhs"},{"vulnerability":"VCID-bren-f4n9-cyhk"},{"vulnerability":"VCID-dbkc-wpyr-7bcx"},{"vulnerability":"VCID-fc3k-zc91-pubu"},{"vulnerability":"VCID-fwqy-uxhw-r3h6"},{"vulnerability":"VCID-g3hx-7nzv-ryhx"},{"vulnerability":"VCID-g8ke-p3q5-qyg5"},{"vulnerability":"VCID-gmdx-e7d2-sqba"},{"vulnerability":"VCID-j5pg-v7n5-c3ah"},{"vulnerability":"VCID-jjf3-4p3w-6keh"},{"vulnerability":"VCID-kagw-a2bj-fbec"},{"vulnerability":"VCID-pez8-dv55-yuhx"},{"vulnerability":"VCID-rc74-mh6y-abez"},{"vulnerability":"VCID-rejj-7zwj-pya6"},{"vulnerability":"VCID-rpt5-58d4-u3g2"},{"vulnerability":"VCID-s1my-pw99-bya8"},{"vulnerability":"VCID-tfvd-w5cn-jug5"},{"vulnerability":"VCID-ue9g-26at-mqbe"},{"vulnerability":"VCID-vr9g-tuvu-5bfr"},{"vulnerability":"VCID-xny2-wxag-1qds"},{"vulnerability":"VCID-yj5w-gv1w-c7gp"},{"vulnerability":"VCID-zh46-yhnw-3uek"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.7.42"}],"aliases":["CVE-2023-34448","GHSA-whr7-m3f8-mpm8"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-8vcs-7bzg-v7a1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/15624?format=json","vulnerability_id":"VCID-9ae4-j22r-zybf","summary":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nstored xss in GitHub repository getgrav/grav prior to 1.7.33.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1173","reference_id":"","reference_type":"","scores":[{"value":"0.00352","scoring_system":"epss","scoring_elements":"0.57891","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1173"},{"reference_url":"https://github.com/getgrav/grav","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav"},{"reference_url":"https://github.com/getgrav/grav/commit/1c0ed43afa5dc14169e6aa693b38e1a2f7aecad9","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getgrav/grav/commit/1c0ed43afa5dc14169e6aa693b38e1a2f7aecad9"},{"reference_url":"https://huntr.dev/bounties/b6016e95-9f48-4945-89cb-199b6e072218","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/b6016e95-9f48-4945-89cb-199b6e072218"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1173","reference_id":"CVE-2022-1173","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1173"},{"reference_url":"https://github.com/advisories/GHSA-3p5m-j98p-c698","reference_id":"GHSA-3p5m-j98p-c698","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-3p5m-j98p-c698"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/60528?format=json","purl":"pkg:composer/getgrav/grav@1.7.33","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-19nj-98jv-77ah"},{"vulnerability":"VCID-1bjq-3mkn-zyga"},{"vulnerability":"VCID-2wpd-95xv-6kde"},{"vulnerability":"VCID-2ye1-e9dh-1bay"},{"vulnerability":"VCID-44z6-1fhy-tydk"},{"vulnerability":"VCID-4jar-dkfg-73cj"},{"vulnerability":"VCID-56q7-vxfn-1fdh"},{"vulnerability":"VCID-5u55-gd8a-u3ec"},{"vulnerability":"VCID-6d91-btd1-g7fm"},{"vulnerability":"VCID-6u43-vkkb-vydt"},{"vulnerability":"VCID-7wp3-csun-8khc"},{"vulnerability":"VCID-85xt-1hrm-7yan"},{"vulnerability":"VCID-8vcs-7bzg-v7a1"},{"vulnerability":"VCID-az1h-2gqk-qfet"},{"vulnerability":"VCID-bhy6-j9pb-dfhs"},{"vulnerability":"VCID-bren-f4n9-cyhk"},{"vulnerability":"VCID-dbkc-wpyr-7bcx"},{"vulnerability":"VCID-fc3k-zc91-pubu"},{"vulnerability":"VCID-fwqy-uxhw-r3h6"},{"vulnerability":"VCID-g3hx-7nzv-ryhx"},{"vulnerability":"VCID-g8ke-p3q5-qyg5"},{"vulnerability":"VCID-gmdx-e7d2-sqba"},{"vulnerability":"VCID-j5pg-v7n5-c3ah"},{"vulnerability":"VCID-jjf3-4p3w-6keh"},{"vulnerability":"VCID-kagw-a2bj-fbec"},{"vulnerability":"VCID-pez8-dv55-yuhx"},{"vulnerability":"VCID-qx77-ytdb-v7fm"},{"vulnerability":"VCID-rc74-mh6y-abez"},{"vulnerability":"VCID-rejj-7zwj-pya6"},{"vulnerability":"VCID-rpt5-58d4-u3g2"},{"vulnerability":"VCID-s1my-pw99-bya8"},{"vulnerability":"VCID-tfvd-w5cn-jug5"},{"vulnerability":"VCID-ue9g-26at-mqbe"},{"vulnerability":"VCID-vr9g-tuvu-5bfr"},{"vulnerability":"VCID-xny2-wxag-1qds"},{"vulnerability":"VCID-yj5w-gv1w-c7gp"},{"vulnerability":"VCID-zh46-yhnw-3uek"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getgrav/grav@1.7.33"}],"aliases":["CVE-2022-1173","GHSA-3p5m-j98p-c698"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-9ae4-j22r-zybf"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/21738?format=json","vulnerability_id":"VCID-az1h-2gqk-qfet","summary":"Grav CMS is vulnerable to Cross Site Scripting (XSS) in the page editor\nGrav CMS 1.7.49 is vulnerable to Cross Site Scripting (XSS). The page editor allows authenticated users to edit page content via a Markdown editor. The editor fails to properly sanitize