CyberRota Analysis
AI-GeneratedGrav CMS versions prior to 2.0.16 are vulnerable due to a timing attack in the nonce verification process, which employs non-constant-time string comparison. This flaw allows attackers to exploit response timing variations to recover valid CSRF nonce values, compromising the effectiveness of CSRF protection. Organizations using affected versions should prioritize patching to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Grav CMS before 2.0.16 contains a timing vulnerability in Utils::verifyNonce() that uses non-constant-time string comparison with the === operator instead of hash_equals() for CSRF nonce validation. Attackers can measure response timing differences to recover valid nonce values byte-by-byte through multiple requests, weakening CSRF protection below its intended security margin.