Grav CMS 2.0.10 is vulnerable to path traversal in the ImageMedium::watermark() method, allowing unauthenticated attackers to disclose arbitrary image files by traversing outside the media sandbox.
Grav CMS +1
web-vulnerability
twig
information-disclosure
1r
2t
1c
updated