CyberRota Analysis
AI-GeneratedGrav versions prior to 2.0.4 are vulnerable due to a misconfigured .htaccess file that lacks the [NC] flag, allowing case-sensitive extension matching on case-insensitive filesystems such as Windows and Docker. This flaw enables unauthenticated attackers to access sensitive configuration files by exploiting uppercase or mixed-case file extensions, potentially exposing API keys and credentials. Organizations using Grav on affected platforms should prioritize patching to mitigate the risk of unauthorized data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Grav before 2.0.4 ships a default .htaccess (and reference webserver-configs/htaccess.txt) whose rules blocking access to sensitive file types (.yaml, .php, .json, etc.) lack the [NC] flag, making extension matching case-sensitive. On case-insensitive filesystems (Windows/NTFS, macOS/HFS+, or Docker volume mounts), an unauthenticated attacker can request these files with uppercase or mixed-case extensions (e.g., .YAML, .PHP) to bypass the restrictions and read sensitive configuration files that may contain API keys and credentials.