CyberRota Analysis
AI-GeneratedGrav versions prior to 2.0.4 are vulnerable due to a misconfiguration in the .htaccess and webserver-configs/htaccess.txt files, which lack the Apache [NC] flag, allowing case-sensitive comparisons of sensitive directory and file-extension patterns. This vulnerability enables unauthenticated attackers on case-insensitive filesystems to bypass security rules and access sensitive files, including password hashes and security configurations. Organizations using affected versions of Grav should prioritize upgrading to version 2.0.4 to mitigate the risk of unauthorized data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Grav is a file-based Web platform. Prior to 2.0.4, the Grav .htaccess and webserver-configs/htaccess.txt security rules omit the Apache [NC] flag and therefore compare sensitive directory and file-extension patterns case-sensitively. On a case-insensitive filesystem, an unauthenticated requester can use uppercase directory or extension variants to bypass the rules and retrieve files under user/accounts or user/config, including password hashes and security configuration. This issue is fixed in version 2.0.4.