Grav CMS vulnerable to Server-Side Template Injection (SSTI)
CVE-2024-28116

8.8HIGH

Key Information:

Vendor

Getgrav

Status
Grav
Vendor
CVE Published:
21 March 2024

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 56%

What is CVE-2024-28116?

Grav, a widely used open-source flat-file content management system, has a vulnerability that allows server-side template injection (SSTI). This vulnerability affects all versions prior to 1.7.45, enabling any authenticated user with editor permissions to execute arbitrary code on the remote server. The existing security measures intended to sandbox such operations can be bypassed, putting sensitive data and system integrity at risk. Users and administrators of Grav CMS are urged to upgrade to version 1.7.45 or later to mitigate this issue effectively.

Affected Version(s)

grav < 1.7.45

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Graver
Created by akabe1

GenGravSSTIExploit
Created by geniuszlyy

References

https://github.com/getgrav/grav/security/advisories/GHSA-...
x_refsource_CONFIRM
https://github.com/getgrav/grav/commit/4149c8133927413074...
x_refsource_MISC

EPSS Score

56% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

JSON
.