8.8

CVE-2025-66297

Exploit

Grav vulnerable to Privilege Escalation and Authenticated Remote Code Execution via Twig Injection

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a user with admin panel access and permissions to create or edit pages in Grav CMS can enable Twig processing in the page frontmatter. By injecting malicious Twig expressions, the user can escalate their privileges to admin or execute arbitrary system commands via the scheduler API. This results in both Privilege Escalation (PE) and Remote Code Execution (RCE) vulnerabilities. This vulnerability is fixed in 1.8.0-beta.27.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Getgrav ≫ Grav Version < 1.8.0
Getgrav ≫ Grav Version 1.8.0 Update beta1
Getgrav ≫ Grav Version 1.8.0 Update beta10
Getgrav ≫ Grav Version 1.8.0 Update beta11
Getgrav ≫ Grav Version 1.8.0 Update beta12
Getgrav ≫ Grav Version 1.8.0 Update beta13
Getgrav ≫ Grav Version 1.8.0 Update beta14
Getgrav ≫ Grav Version 1.8.0 Update beta15
Getgrav ≫ Grav Version 1.8.0 Update beta16
Getgrav ≫ Grav Version 1.8.0 Update beta17
Getgrav ≫ Grav Version 1.8.0 Update beta18
Getgrav ≫ Grav Version 1.8.0 Update beta19
Getgrav ≫ Grav Version 1.8.0 Update beta2
Getgrav ≫ Grav Version 1.8.0 Update beta20
Getgrav ≫ Grav Version 1.8.0 Update beta21
Getgrav ≫ Grav Version 1.8.0 Update beta22
Getgrav ≫ Grav Version 1.8.0 Update beta23
Getgrav ≫ Grav Version 1.8.0 Update beta24
Getgrav ≫ Grav Version 1.8.0 Update beta25
Getgrav ≫ Grav Version 1.8.0 Update beta26
Getgrav ≫ Grav Version 1.8.0 Update beta3
Getgrav ≫ Grav Version 1.8.0 Update beta4
Getgrav ≫ Grav Version 1.8.0 Update beta5
Getgrav ≫ Grav Version 1.8.0 Update beta6
Getgrav ≫ Grav Version 1.8.0 Update beta7
Getgrav ≫ Grav Version 1.8.0 Update beta8
Getgrav ≫ Grav Version 1.8.0 Update beta9
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.77% 0.518
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
security-advisories@github.com 7.4 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine

The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine.

https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458
Patch
https://github.com/getgrav/grav/security/advisories/GHSA-858q-77wx-hhx6
Third Party Advisory
Exploit