CyberRota Analysis
AI-GeneratedGrav versions prior to 2.0.4 are vulnerable to a regular expression denial of service (ReDoS) attack through the regex_replace filter and function in the Twig content sandbox, which can lead to significant CPU resource exhaustion. This issue arises when authenticated page editors exploit a backtracking PCRE pattern, potentially causing the web server to become unresponsive. Organizations using Grav with Twig processing enabled should prioritize patching to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Grav before 2.0.4 contains a regular expression denial of service (ReDoS) vulnerability in the regex_replace filter and function, which are allowlisted in the Twig content sandbox. When Twig processing in page content is enabled (security.twig_content.process_enabled: true, disabled by default), an authenticated page editor can supply a catastrophically backtracking PCRE pattern that is passed directly to PHP's preg_replace(), causing unbounded CPU consumption and denial of service to the web server process.