CVE-2023-34448

Katalog CVE

CVSS 7.2 · High EPSS 4,5%

Kerentanan Improper Input Validation pada getgrav grav. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

Grav is a flat-file content management system. Prior to version 1.7.42, the patch for CVE-2022-2073, a server-side template injection vulnerability in Grav leveraging the default `filter()` function, did not block other built-in functions exposed by Twig's Core Extension that could be used to invoke arbitrary unsafe functions, thereby allowing for remote code execution. A patch in version 1.74.2 overrides the built-in Twig `map()` and `reduce()` filter functions in `system/src/Grav/Common/Twig/Extension/GravExtension.php` to validate the argument passed to the filter in `$arrow`.

Rincian

Terbit di NVD

14 Juni 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation
CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine
CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

4,5% peluang dieksploitasi; lebih tinggi dari 91,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/getgrav/grav/commit/8c2c1cb72611a399f13423fc6d0e1d998c03e5c8 patch · advisory vendor
• https://github.com/getgrav/grav/security/advisories/GHSA-whr7-m3f8-mpm8 advisory vendor
• https://github.com/twigphp/Twig/blob/v1.44.7/src/Environment.php#L148 advisory vendor
• https://www.github.com/getgrav/grav/commit/9d6a2dba09fd4e56f5cdfb9a399caea355bfeb83 exploit · mitigasi · advisory vendor
• https://huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66/ exploit · patch · advisory pihak ketiga