{"id":"CVE-2023-34251","published":"2023-06-14T21:31:31Z","modified":"2024-12-27T16:52:56Z","title":"Grav Server Side Template Injection vulnerability","vendor":"getgrav","product":"grav","tier":"tail","description":{"text":"Grav is a flat-file content management system. Versions prior to 1.7.42 are vulnerable to server side template injection. Remote code execution is possible by embedding malicious PHP code on the administrator screen by a user with page editing privileges. Version 1.7.42 contains a fix for this issue.","provenance":"source","from":"CVE.org"},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.02338,"percentile":0.83585,"provenance":"source"},"cwes":[{"id":"CWE-94","name":"Improper Control of Generation of Code"}],"references":[{"url":"https://github.com/getgrav/grav/security/advisories/GHSA-f9jf-4cp4-4fq5","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/getgrav/grav/commit/9d01140a63c77075ef09b26ef57cf186138151a5","tags":["x_refsource_MISC"]},{"url":"https://github.com/getgrav/grav/blob/develop/system/src/Grav/Common/Twig/Extension/GravExtension.php#L174","tags":["x_refsource_MISC"]}],"priority":{"score":23.7,"factors":[{"name":"EPSS percentile","points":16.72},{"name":"CVSS severity","points":7.0}]},"vendorSlug":"getgrav","affectedVersions":[{"vendor":"getgrav","product":"grav","versions":["< 1.7.42"]}],"affected":[{"ecosystem":"Packagist","package":"getgrav/grav","vulnerableRanges":["<1.7.42"],"patched":["1.7.42"],"from":["GHSA-f9jf-4cp4-4fq5"],"provenance":"source"}],"euvd":{"id":"EUVD-2023-1781","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-getgrav-grav-cve-2022-2073","parents":[{"from":"CVE-2022-2073","to":"CVE-2023-34251","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["system/src/Grav/Common/Twig/Extension/GravExtension.php"],"commits":["https://github.com/getgrav/grav/commit/9d6a2dba09fd4e56f5cdfb9a399caea355bfeb83","https://github.com/getgrav/grav/commit/244758d4383034fe4cd292d41e477177870b65ec"],"basis":"shared function","functions":["getFilters","ofTypeFunc"]}]}]}}