CVEvulnerability
CVE-2021-29440
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-04-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.4 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code execution and elevate privileges on the instance. The issue was addressed in version 1.7.11.
Affected configurations
• getgrav grav (< 1.7.11)
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://packetstormsecurity.com/files/162987/Grav-CMS-1.7.10-Server-Side-Template-Injection.html Exploit, Third Party Advisory, VDB Entry
- https://blog.sonarsource.com/grav-cms-code-execution-vulnerabilities Exploit, Third Party Advisory
- https://github.com/getgrav/grav/security/advisories/GHSA-g8r4-p96j-xfxc Third Party Advisory
- https://packagist.org/packages/getgrav/grav Product, Third Party Advisory
- http://packetstormsecurity.com/files/162987/Grav-CMS-1.7.10-Server-Side-Template-Injection.html Exploit, Third Party Advisory, VDB Entry
- https://blog.sonarsource.com/grav-cms-code-execution-vulnerabilities Exploit, Third Party Advisory
- https://github.com/getgrav/grav/security/advisories/GHSA-g8r4-p96j-xfxc Third Party Advisory
- https://packagist.org/packages/getgrav/grav Product, Third Party Advisory