getgrav/grav vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

GE

Product

getgrav/grav

by getgrav · last CVE Jun 29, 2022

8

CVEs

0

On KEV

7.5

Max CVSS

0

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 0High 2Medium 6Low 0

Severity

All severities8 Critical0 High2 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add getgrav/grav to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-3924	7.5	4%	Nov 5	Path Traversal in getgrav/grav Affected: through 1.7.24
CVE-2022-2073	7.2	11%	Jun 29	Code Injection in getgrav/grav Affected: before 1.7.34
CVE-2022-1173	5.4	2%	Apr 26	stored xss in getgrav/grav Affected: before 1.7.33
CVE-2022-0970	5.4	2%	Mar 15	Cross-site Scripting (XSS) - Stored in getgrav/grav Affected: before 1.7.31
CVE-2022-0268	5.4	1%	Jan 25	Cross-site Scripting (XSS) - Stored in getgrav/grav Affected: before 1.7.28
CVE-2021-3904	5.4	1%	Oct 27	Cross-site Scripting (XSS) - Stored in getgrav/grav Affected: before 1.7.24
CVE-2021-3818	5.3	2%	Sep 27	Reliance on Cookies without Validation and Integrity Checking in getgrav/grav Affected: before 1.7.22
CVE-2022-0743	4.6	1%	Feb 28	Cross-site Scripting (XSS) - Stored in getgrav/grav Affected: before 1.7.31