CVE-2023-34448 — Grav is a flat-file content management system

Grav is a flat-file content management system. Prior to version 1.7.42, the patch for CVE-2022-2073, a server-side template injection vulnerability in Grav leveraging the default `filter()` function, did not block other built-in functions exposed by Twig's Core Extension tha

01What is this vulnerability?

Grav is a flat-file content management system. Prior to version 1.7.42, the patch for CVE-2022-2073, a server-side template injection vulnerability in Grav leveraging the default `filter()` function, did not block other built-in functions exposed by Twig's Core Extension that could be used to invoke arbitrary unsafe functions, thereby allowing for remote code execution. A patch in version 1.74.2…

02Affected products

Vendor	Product	Versions
getgrav	grav	< 1.7.42

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

• Patch to a fixed version listed in the vendor advisory (see references below).
• Mitigate with WAF rules, network egress filters, or feature flags where the patch is not yet available.
• Hunt historical logs for exploitation indicators — see Detection signatures below.

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

08Timeline

• Published: 2023-06-14T22:06:01.338Z
• Last modified: 2024-12-18T21:38:44.207Z

09References

• github.com — https://github.com/getgrav/grav/security/advisories/GHSA-whr7-m3f8-mpm8
• github.com — https://github.com/getgrav/grav/commit/8c2c1cb72611a399f13423fc6d0e1d998c03e5c8
• github.com — https://github.com/twigphp/Twig/blob/v1.44.7/src/Environment.php#L148
• huntr.dev — https://huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66/
• www.github.com — https://www.github.com/getgrav/grav/commit/9d6a2dba09fd4e56f5cdfb9a399caea355bfe…