Lucene search

GitHub Advisory DatabaseGHSA-CXGW-R5JG-7XWQ

HistoryJun 30, 2022 - 12:00 a.m.

Code injection in grav

2022-06-3000:00:29

CWE-94

GitHub Advisory Database

github.com

grav

server side template injection

twig

vulnerability

system function

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

41.2%

JSON

Grav is vulnerable to Server Side Template Injection via Twig. According to a previous vulnerability report, Twig should not render dangerous functions by default, such as system.

Affected configurations

Vulners

Node

getgravgravRange<1.7.34

VendorProductVersionCPE
getgravgrav*cpe:2.3:a:getgrav:grav:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
getgrav	grav	*	cpe:2.3:a:getgrav:grav::::::::

References

github.com/advisories/GHSA-cxgw-r5jg-7xwq

github.com/getgrav/grav/commit/9d6a2dba09fd4e56f5cdfb9a399caea355bfeb83

huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66

nvd.nist.gov/vuln/detail/CVE-2022-2073

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

41.2%

JSON

Related for GHSA-CXGW-R5JG-7XWQ