6.8

CVE-2025-66302

Exploit

Grav vulnerable to Path Traversal allowing server files backup

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A path traversal vulnerability has been identified in Grav CMS, allowing authenticated attackers with administrative privileges to read arbitrary files on the underlying server filesystem. This vulnerability arises due to insufficient input sanitization in the backup tool, where user-supplied paths are not properly restricted, enabling access to files outside the intended webroot directory. The impact of this vulnerability depends on the privileges of the user account running the application. This vulnerability is fixed in 1.8.0-beta.27.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Getgrav ≫ Grav Version < 1.8.0
Getgrav ≫ Grav Version 1.8.0 Update beta1
Getgrav ≫ Grav Version 1.8.0 Update beta10
Getgrav ≫ Grav Version 1.8.0 Update beta11
Getgrav ≫ Grav Version 1.8.0 Update beta12
Getgrav ≫ Grav Version 1.8.0 Update beta13
Getgrav ≫ Grav Version 1.8.0 Update beta14
Getgrav ≫ Grav Version 1.8.0 Update beta15
Getgrav ≫ Grav Version 1.8.0 Update beta16
Getgrav ≫ Grav Version 1.8.0 Update beta17
Getgrav ≫ Grav Version 1.8.0 Update beta18
Getgrav ≫ Grav Version 1.8.0 Update beta19
Getgrav ≫ Grav Version 1.8.0 Update beta2
Getgrav ≫ Grav Version 1.8.0 Update beta20
Getgrav ≫ Grav Version 1.8.0 Update beta21
Getgrav ≫ Grav Version 1.8.0 Update beta22
Getgrav ≫ Grav Version 1.8.0 Update beta23
Getgrav ≫ Grav Version 1.8.0 Update beta24
Getgrav ≫ Grav Version 1.8.0 Update beta25
Getgrav ≫ Grav Version 1.8.0 Update beta26
Getgrav ≫ Grav Version 1.8.0 Update beta3
Getgrav ≫ Grav Version 1.8.0 Update beta4
Getgrav ≫ Grav Version 1.8.0 Update beta5
Getgrav ≫ Grav Version 1.8.0 Update beta6
Getgrav ≫ Grav Version 1.8.0 Update beta7
Getgrav ≫ Grav Version 1.8.0 Update beta8
Getgrav ≫ Grav Version 1.8.0 Update beta9
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.47% 0.381
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 2.3 4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
security-advisories@github.com 6.8 2.3 4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

https://github.com/getgrav/grav/commit/ed640a13143c4177af013cf001969ed2c5e197ee
Patch
https://github.com/getgrav/grav/security/advisories/GHSA-j422-qmxp-hv94
Third Party Advisory
Exploit