Lucene search
Veracode Vulnerability DatabaseVERACODE:36212HistoryJun 30, 2022 - 5:21 a.m.
Remote Code Execution
2022-06-3005:21:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
30
getgrav/grav
remote code execution
twig template injection
server side
authenticated remote attacker
risky functions
system
software
EPSS
0.001
Percentile
41.2%
getgrav/grav is vulnerable to remote code execution. An authenticated remote attacker is able to cause server side template injection via Twig which renders risky functions by default, such as system.
Related
github
github
Code injection in grav
2022-06-30 00:00:29
Grav Server-side Template Injection (SSTI) via Twig Default Filters
2023-06-16 19:37:08
Grav Server-side Template Injection (SSTI) via Twig Default Filters
2023-06-16 19:36:39
osv
osv
Code injection in grav
2022-06-30 00:00:29
CVE-2022-2073
2022-06-29 19:15:09
CVE-2023-34448
2023-06-14 23:15:11
prion
prion
Code injection
2022-06-29 19:15:00
Design/Logic Flaw
2023-06-14 23:15:00
cvelist
cvelist
CVE-2022-2073 Code Injection in getgrav/grav
2022-06-29 18:20:11
huntr
huntr
Server Side Template Injection
2022-04-07 21:45:14
nvd
nvd
CVE-2022-2073
2022-06-29 19:15:09
CVE-2023-34448
2023-06-14 23:15:11
cve
cve
CVE-2022-2073
2022-06-29 19:15:09
CVE-2023-34448
2023-06-14 23:15:11
veracode
veracode
Server-side Template Injection(SSTI)
2023-06-21 07:09:56