CPE
Authentication Bypass in Grav Clockwork Profiler
1 TTP 1 CVEGrav versions 2.0.22 through 2.1.6 are vulnerable to an authentication bypass in the Clockwork profiler that trusts loopback REMOTE_ADDR headers, potentially exposing system configuration and secrets.
Multiple Vulnerabilities in Argo CD
2 TTPs 5 CVEsArgo CD is affected by multiple vulnerabilities including CVE-2024-28113, CVE-2024-28114, CVE-2024-28115, and CVE-2024-28116, which allow for remote code execution, unauthorized information disclosure, and security control bypasses.
Privilege Escalation in Grav CMS via Account Blueprint Bypass
1 TTP 1 CVEGrav CMS versions 2.0.14 through 2.0.24 contain a privilege escalation vulnerability allowing authenticated backend operators to bypass security guards and grant themselves super-admin privileges.
Grav CMS Session Hijacking via Twig Sandbox Injection
3 TTPs 2 CVEsGrav CMS versions 1.7.x and 2.0.0 through 2.0.24 are vulnerable to session hijacking due to an improperly restricted get_cookie() function within the Twig rendering engine.
Grav CMS Path Traversal in MediaUploadTrait Leading to Arbitrary File Deletion
3 TTPs 1 CVEAn authenticated path traversal vulnerability in Grav CMS's MediaUploadTrait allows users with media management permissions to delete arbitrary files on the server by providing crafted file paths.
Grav Privilege Escalation via Group Blueprint ACL Bypass
1 rule 3 TTPs 1 CVEA missing 'security@' guard in Grav's group blueprint allows an 'admin.users' operator to escalate privileges to 'admin.super' by modifying group access configurations.
Grav CMS Twig Sandbox Bypass via Configuration Exposure
3 TTPs 1 CVECVE-2026-92917 allows an authenticated user with page-edit privileges in Grav CMS 2.0.0-rc.1 through 2.0.21 to bypass Twig sandboxing and exfiltrate the full application configuration, including API keys and credentials.
Remote Code Execution in Grav via Twig sort filter
1 TTP 1 CVEGrav versions 2.0.17 and earlier contain a remote code execution vulnerability in the Twig sort filter that allows authenticated users with page-write permissions to execute arbitrary PHP code.