CyberRota Analysis
AI-GeneratedThe grav-plugin-database for Grav CMS prior to version 1.2.0 is vulnerable due to improper handling of user-configurable YAML values, allowing an administrator with plugin configuration access to inject malicious DSN attributes or exploit path traversal vulnerabilities. This could lead to unauthorized access to the database or file system. Administrators using affected versions should prioritize upgrading to version 1.2.0 to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
grav-plugin-database is the database plugin for Grav CMS. Prior to 1.2.0, Database::__call builds PDO DSN strings by directly concatenating user-configurable YAML values from fields such as host, dbname, charset, server, database, directory, and filename without sanitization or validation, allowing an administrator with plugin configuration access to inject DSN attributes or path traversal values. This issue is fixed in version 1.2.0.