CyberRota Analysis
AI-GeneratedGrav CMS 2.0.10 is vulnerable to a path traversal issue in the ImageMedium::watermark() function, allowing attackers to exploit unsanitized image inputs to access arbitrary files outside the designated media sandbox. This vulnerability can lead to unauthorized disclosure of sensitive files via public URLs, posing a significant risk to the integrity of the system. Organizations using this version of Grav CMS should prioritize patching to mitigate potential data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Grav CMS 2.0.10 contains a path traversal vulnerability in ImageMedium::watermark(), which passes its unsanitized $image argument to RocketTheme\Toolbox\ResourceLocator\UniformResourceLocator::findResource(). Because the file:// scheme branch only lexically collapses '..' segments without a realpath/containment check, an editor authoring Markdown image syntax with traversal sequences can cause arbitrary image files outside Grav's media sandbox to be composited into a carrier image, which is then cached and served from a public, unauthenticated URL — disclosing those files to anonymous visitors.