CVE-2022-2073

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Code Injection in GitHub repository getgrav/grav prior to 1.7.34.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Jun 29, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-207307.5A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, rCVE-2022-207316.8Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attackCVE-2022-207327.8A vulnerability in the configuration file protections of Cisco Virtualized Infrastructure Manager (VIM) could allow an authenticated, local CVE-2022-207339.8A vulnerability in the login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to log in without CVE-2022-207344.4A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, local attacker to view sensitive information on an affected sCVE-2022-207356.5A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to coCVE-2022-207365.3A vulnerability in the web-based management interface of Cisco AppDynamics Controller Software could allow an unauthenticated, remote attackCVE-2022-207377.1A vulnerability in the handler for HTTP authentication for resources accessed through the Clientless SSL VPN portal of Cisco Adaptive SecuriCVE-2022-207389.8A vulnerability in the Cisco Umbrella Secure Web Gateway service could allow an unauthenticated, remote attacker to bypass the file inspectiCVE-2022-207397.3A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbitrary commands on thCVE-2022-20747.5In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template.CVE-2022-207406.1A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, re
CVE-2022-2073: High severity, CVSS 7.2 | Vulnix