CyberRota Analysis
AI-GeneratedGrav CMS versions prior to 2.0.16 are vulnerable to a path traversal flaw in the media_directory() Twig function, which does not properly validate filesystem paths. This allows authenticated users with page authoring privileges to access and enumerate files outside the intended directory, potentially exposing sensitive information. Organizations using Grav CMS should prioritize patching this vulnerability to mitigate the risk of unauthorized file access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Grav CMS before 2.0.16 contains a path traversal vulnerability in the media_directory() Twig function that fails to validate filesystem paths, allowing authenticated users to enumerate and access files outside intended scope. Attackers with page authoring privileges can supply arbitrary filesystem paths to media_directory() and use the allow-listed filepath accessor on Medium objects to read file contents of any file matching configured media extensions that the web server process can access.