CVE-2023-34448
Description
Grav is a flat-file content management system. Prior to version 1.7.42, the patch for CVE-2022-2073, a server-side template injection vulnerability in Grav leveraging the default `filter()` function, did not block other built-in functions exposed by Twig's Core Extension that could be used to invoke arbitrary unsafe functions, thereby allowing for remote code execution. A patch in version 1.74.2 overrides the built-in Twig `map()` and `reduce()` filter functions in `system/src/Grav/Common/Twig/Extension/GravExtension.php` to validate the argument passed to the filter in `$arrow`.
How to fix
- getgrav grav1.7.42 or later
- getgrav/grav1.7.42 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| getgrav grav | v < 1.7.42 | 1.7.42 |
| getgrav/gravPackagist | v < 1.7.42 | 1.7.42 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.