CVE-2023-34448
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk90th percentile - higher than 90% of all known CVEs
Summary
Grav is a flat-file content management system. In versions prior to 1.7.42, there was a server-side template injection vulnerability that allowed remote code execution by not blocking certain built-in functions exposed by Twig.
Risk Assessment
Organizations using the vulnerable version of Grav may be at risk of remote code execution, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to upgrade to version 1.7.42 or later to patch this vulnerability and secure the system against potential attacks.
Original NVD description (English source)
Grav is a flat-file content management system. Prior to version 1.7.42, the patch for CVE-2022-2073, a server-side template injection vulnerability in Grav leveraging the default `filter()` function, did not block other built-in functions exposed by Twig's Core Extension that could be used to invoke arbitrary unsafe functions, thereby allowing for remote code execution. A patch in version 1.74.2 overrides the built-in Twig `map()` and `reduce()` filter functions in `system/src/Grav/Common/Twig/Extension/GravExtension.php` to validate the argument passed to the filter in `$arrow`.