CVE-2025-66298

Published: Dec 1, 2025Modified: Jun 17, 2026

7.7

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: security-advisories@github.com (Secondary)

Description

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, having a simple form on site can reveal the whole Grav configuration details (including plugin configuration details) by using the correct POST payload to exploit a Server-Side Template (SST) vulnerability. Sensitive information may be contained in the configuration details. This vulnerability is fixed in 1.8.0-beta.27.

Affected (27)

Products: Getgrav: Grav

Getgrav

1 product

Grav

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Getgrav Grav	Before 1.8.0
Getgrav Grav	Version 1.8.0 beta10
Getgrav Grav	Version 1.8.0 beta11
Getgrav Grav	Version 1.8.0 beta12
Getgrav Grav	Version 1.8.0 beta13
Getgrav Grav	Version 1.8.0 beta14
Getgrav Grav	Version 1.8.0 beta15
Getgrav Grav	Version 1.8.0 beta16
Getgrav Grav	Version 1.8.0 beta17
Getgrav Grav	Version 1.8.0 beta18
Getgrav Grav	Version 1.8.0 beta19
Getgrav Grav	Version 1.8.0 beta1
Getgrav Grav	Version 1.8.0 beta20
Getgrav Grav	Version 1.8.0 beta21
Getgrav Grav	Version 1.8.0 beta22
Getgrav Grav	Version 1.8.0 beta23
Getgrav Grav	Version 1.8.0 beta24
Getgrav Grav	Version 1.8.0 beta25
Getgrav Grav	Version 1.8.0 beta26
Getgrav Grav	Version 1.8.0 beta2
Getgrav Grav	Version 1.8.0 beta3
Getgrav Grav	Version 1.8.0 beta4
Getgrav Grav	Version 1.8.0 beta5
Getgrav Grav	Version 1.8.0 beta6
Getgrav Grav	Version 1.8.0 beta7
Getgrav Grav	Version 1.8.0 beta8
Getgrav Grav	Version 1.8.0 beta9

Related CWEs

CWE-1336

Improper Neutralization of Special Elements Used in a Template Engine

The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine.

References (2)

https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458

Source: security-advisories@github.com

Patch

https://github.com/getgrav/grav/security/advisories/GHSA-8535-hvm8-2hmv

Source: security-advisories@github.com

ExploitThird Party Advisory

Timeline

No history available yet.