CyberRota Analysis
AI-GeneratedGrav CMS versions prior to 2.0.16 are vulnerable due to inadequate filtering of configuration arrays in sandboxed Twig renders, enabling content editors to access sensitive configuration values, including cache credentials. This flaw allows attackers with page-content edit permissions to exploit dot notation in Twig templates, circumventing existing security measures. Organizations using Grav CMS should prioritize patching this vulnerability to protect sensitive information from unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Grav CMS before 2.0.16 fails to filter system, site, and theme configuration arrays in sandboxed Twig renders, allowing content editors to read sensitive configuration values. Attackers with page-content edit access can access raw configuration arrays including secrets like cache credentials by using dot notation in Twig templates, bypassing the config_denied_paths restrictions.