PT-2021-11691 · Grav Cms · Grav Cms

Published 2021-03-15 · Updated 2022-05-24 · CVE-2020-29553

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Grav CMS versions through 1.7.0-rc.17

Description: The issue allows an attacker to execute system commands or read and delete arbitrary files on the server by exploiting path-traversal techniques and a lack of CSRF protection. This can be achieved by tricking an admin into visiting a malicious website.

Recommendations: For Grav CMS versions through 1.7.0-rc.17, as a temporary workaround, consider disabling the Scheduler and Backup functionalities until a patch is available. Restrict access to the BackupDelete functionality to minimize the risk of exploitation. Avoid using the Backup functionality to read local files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

CSRF

Weakness Enumeration

CWE-22

CWE-352

Related Identifiers

CVE-2020-29553

GHSA-FQFF-VCVX-68H3

GHSA-GPMF-Q5JH-HJX4

GHSA-R3RG-JRJQ-W4MR

Affected Products

Grav Cms

References · 12

• 🔥 https://blog.bssi.fr/cve-2020-29553-cve-2020-29555-cve-2020-29556-multiple-vulnerabilities-within-cms-grav · Exploit
• https://osv.dev/vulnerability/GHSA-gpmf-q5jh-hjx4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-29556 · Security Note
• https://osv.dev/vulnerability/GHSA-fqff-vcvx-68h3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-29553 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-29555 · Security Note
• https://osv.dev/vulnerability/CVE-2020-29553 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r3rg-jrjq-w4mr · Vendor Advisory
• https://github.com/getgrav/grav · Note
• https://t.me/cvenotify/11917 · Telegram Post
• https://t.me/cvenotify/11919 · Telegram Post
• https://t.me/cvenotify/11366 · Telegram Post