CVE-2024-28116

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Grav is an open-source, flat-file content management system. Grav CMS prior to version 1.7.45 is vulnerable to a Server-Side Template Injection (SSTI), which allows any authenticated user (editor permissions are sufficient) to execute arbitrary code on the remote server bypassing the existing security sandbox. Version 1.7.45 contains a patch for this issue.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94 CWE-1336

Affected software

Vendor	Product	Versions
getgrav	grav	< 1.7.45
getgrav	grav	< 1.7.45

References

https://github.com/getgrav/grav/commit/4149c81339274130742831422de2685f298f3a6ePatch
https://github.com/getgrav/grav/security/advisories/GHSA-c9gp-64c4-2rrhExploit, Vendor Advisory
https://github.com/getgrav/grav/commit/4149c81339274130742831422de2685f298f3a6ePatch
https://github.com/getgrav/grav/security/advisories/GHSA-c9gp-64c4-2rrhExploit, Vendor Advisory

Timeline

Published: Mar 21, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-281178.8Grav is an open-source, flat-file content management system. Prior to version 1.7.45, Grav validates accessible functions through the Utils:CVE-2024-281188.8Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to twig extension class CVE-2024-281198.8Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to twig extension class CVE-2024-28128.8A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been classified as critical. This affects the function formWriteF CVE-2024-281207.5codeium-chrome is an open source code completion plugin for the chrome web browser. The service worker of the codeium-chrome extension doesn CVE-2024-281218.8stimulus_reflex is a system to extend the capabilities of both Rails and Stimulus by intercepting user interactions and passing them to Rail CVE-2024-281226.8JWX is Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. This vulnerability allows an attacker CVE-2024-281239.8Wasmi is an efficient and lightweight WebAssembly interpreter with a focus on constrained and embedded systems. In the WASMI Interpreter, an CVE-2024-281259.8FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands. Note: A contributor of FitNesse has claimed t CVE-2024-281266.1Cross-site scripting vulnerability exists in 0ch BBS Script ver.4.00. An arbitrary script may be executed on the web browser of the user acc CVE-2024-281277.5Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of priv CVE-2024-281286.1Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execu