GHSA-cxgw-r5jg-7xwqHighCVSS 7.2

Code injection in grav

Published
June 30, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-2073 →

📋 Description

Grav is vulnerable to Server Side Template Injection via Twig. According to a previous vulnerability report, Twig should not render dangerous functions by default, such as system.

🎯 Affected products1

  • composer/getgrav/grav:< 1.7.34

🔗 References (4)