PT-2021-11693 · Grav Cms · Grav Cms

Published 2021-03-15 · Updated 2022-05-24 · CVE-2020-29556

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Grav CMS versions through 1.7.0-rc.17

Description: The issue in Grav CMS allows an attacker to read arbitrary local files on the server using a path-traversal technique. This can be exploited by both authenticated and unauthenticated attackers due to the lack of CSRF protection. Additionally, the Scheduler component is vulnerable to system command execution by tricking an admin into visiting a malicious website, also exploiting CSRF weaknesses.

Recommendations: For Grav CMS versions through 1.7.0-rc.17, update to a version that addresses the path-traversal and CSRF vulnerabilities to prevent arbitrary file reading and system command execution. As a temporary workaround, consider restricting access to the Backup functionality and the Scheduler component to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-29556

GHSA-R3RG-JRJQ-W4MR

Affected Products

Grav Cms

References · 8

• 🔥 https://blog.bssi.fr/cve-2020-29553-cve-2020-29555-cve-2020-29556-multiple-vulnerabilities-within-cms-grav · Exploit
• https://osv.dev/vulnerability/CVE-2020-29556 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-29556 · Security Note
• https://osv.dev/vulnerability/GHSA-r3rg-jrjq-w4mr · Vendor Advisory
• https://github.com/getgrav/grav · Note
• https://t.me/cvenotify/11917 · Telegram Post
• https://t.me/cvenotify/11919 · Telegram Post
• https://t.me/cvenotify/11366 · Telegram Post