Servers and applications
CVE-2023-34251
Grav is a flat-file content management system. Versions prior to 1.7.42 are vulnerable to server side template injection. Remote code execution is possible by embedding malicious PHP code on the administrator screen by a user with page editing privileges. Version 1.7.42 contains a fix for this issue.
- Severity
- High 7.2
- Published
- 14 Jun 2023
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 1.7.42
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
GravServers and applications · cpe:a:getgrav:grav |
|