CyberRota Analysis
AI-GeneratedGrav versions prior to 9.1.8 are vulnerable due to an arbitrary file write flaw in the Form plugin, which fails to re-validate the process.save.filename parameter after Twig rendering. This allows attackers to exploit path traversal sequences in submitted form data, potentially writing malicious files, such as PHP webshells, to critical directories. Organizations using Grav should prioritize patching this vulnerability to prevent unauthorized file access and potential system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Grav before 9.1.8 contains an arbitrary file write vulnerability in the Form plugin's process.save.filename parameter, which is validated against path traversal before Twig processing but never re-validated after rendering. Attackers can submit form data containing path traversal sequences that are processed through Twig templates, allowing them to write arbitrary files including PHP webshells to the web root or other sensitive directories.