{"items":[{"id":"NVI-00005476","kind":"vulnerability","title":"Grav vulnerable to Path Traversal allowing server files backup","revision":2,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected.","NVD lastModified does not establish freshness of every associated CPE record."],"lifecycle":"active","identifiers":["GHSA-j422-qmxp-hv94","CVE-2025-66302"],"plain_summary":"OSV carries this publisher advisory for getgrav/grav. This is an aggregated source copy; consult the original publisher and compare update dates.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"The original advisory lists fixed boundaries 1.8.0-beta.27 for getgrav/grav. Confirm the publisher’s latest guidance.","source_ids":["sr-914ac4c2d2722e95b0f35ad4a86ba003"],"action_type":"vendor_patch","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null},{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-a13ccc085ecd32d4601f881a2ecf96c3"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[{"kind":"CVSS","as_of":"2026-09-26T00:10:00.127Z","value":"6.8 MEDIUM (3.1)","meaning":"security-advisories@github.com severity; no combined Null risk score.","source_id":"sr-a13ccc085ecd32d4601f881a2ecf96c3"},{"kind":"CVSS","as_of":"2026-09-26T00:10:00.127Z","value":"6.8 MEDIUM (3.1)","meaning":"nvd@nist.gov severity; no combined Null risk score.","source_id":"sr-a13ccc085ecd32d4601f881a2ecf96c3"}],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-914ac4c2d2722e95b0f35ad4a86ba003","url":"https://github.com/advisories/GHSA-j422-qmxp-hv94","basis":"vendor_advisory","notes":"GitHub-origin advisory, CC-BY-4.0; OSV is an aggregate copy, not independent corroboration.","title":"GHSA-j422-qmxp-hv94","publisher":"GitHub Advisory Database via OSV","observed_at":"2026-10-31T21:42:20.435Z"},{"id":"sr-a13ccc085ecd32d4601f881a2ecf96c3","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66302","basis":"official_catalog","notes":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","title":"CVE-2025-66302","publisher":"NIST National Vulnerability Database","observed_at":"2026-11-01T01:40:29.811Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-914ac4c2d2722e95b0f35ad4a86ba003"],"technology":"getgrav/grav","known_exclusions":[],"conditions_summary":"### Summary\n```\nA path traversal vulnerability has been identified in Grav CMS, versions 1.7.49.5 , allowing authenticated attackers\n with administrative privileges to read arbitrary files on the underlying server filesystem. This vulnerability arises due\n to insufficient input sanitization in the backup tool, where user-supplied paths are not properly restricted, enabling\n access to files outside the intended webroot directory. The impact of this vulnerability depends on the privileges of \nthe user account running the application.\n```\n\n### PoC\n```\nTo accurately demonstrate the maximum potential impact of this vulnerability, the testing environment was configured in a specific way:\n\n- Elevated Privileges: The application was run locally with the highest possible system privileges, operating under the **`root`** user account.\n    \n- Objective: This configuration was chosen to unequivocally show that the path traversal vulnerability is not just a theoretical issue but can lead to a complete compromise of the underlying host when combined with poor operational practices. The ability to read any file on the system is the ultimate test of the flaw's severity.\n    \n\nProof of Concept Goal","public_affected_ranges":["ECOSYSTEM: introduced 0; fixed 1.8.0-beta.27"]}],"null_published_at":"2026-11-06T15:18:17.648Z","source_updated_at":"2026-09-10T03:50:58.726Z","source_disclosed_at":"2025-12-02T00:38:41.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"Source facts changed; compare the preserved prior revision.","null_first_observed_at":"2026-10-31T21:42:20.435Z"},{"id":"NVI-00005476","kind":"vulnerability","title":"Grav vulnerable to Path Traversal allowing server files backup","revision":1,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected."],"lifecycle":"active","identifiers":["GHSA-j422-qmxp-hv94","CVE-2025-66302"],"plain_summary":"OSV carries this publisher advisory for getgrav/grav. This is an aggregated source copy; consult the original publisher and compare update dates.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"The original advisory lists fixed boundaries 1.8.0-beta.27 for getgrav/grav. Confirm the publisher’s latest guidance.","source_ids":["sr-914ac4c2d2722e95b0f35ad4a86ba003"],"action_type":"vendor_patch","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-914ac4c2d2722e95b0f35ad4a86ba003","url":"https://github.com/advisories/GHSA-j422-qmxp-hv94","basis":"vendor_advisory","notes":"GitHub-origin advisory, CC-BY-4.0; OSV is an aggregate copy, not independent corroboration.","title":"GHSA-j422-qmxp-hv94","publisher":"GitHub Advisory Database via OSV","observed_at":"2026-10-31T21:42:20.435Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-914ac4c2d2722e95b0f35ad4a86ba003"],"technology":"getgrav/grav","known_exclusions":[],"conditions_summary":"### Summary\n```\nA path traversal vulnerability has been identified in Grav CMS, versions 1.7.49.5 , allowing authenticated attackers\n with administrative privileges to read arbitrary files on the underlying server filesystem. This vulnerability arises due\n to insufficient input sanitization in the backup tool, where user-supplied paths are not properly restricted, enabling\n access to files outside the intended webroot directory. The impact of this vulnerability depends on the privileges of \nthe user account running the application.\n```\n\n### PoC\n```\nTo accurately demonstrate the maximum potential impact of this vulnerability, the testing environment was configured in a specific way:\n\n- Elevated Privileges: The application was run locally with the highest possible system privileges, operating under the **`root`** user account.\n    \n- Objective: This configuration was chosen to unequivocally show that the path traversal vulnerability is not just a theoretical issue but can lead to a complete compromise of the underlying host when combined with poor operational practices. The ability to read any file on the system is the ultimate test of the flaw's severity.\n    \n\nProof of Concept Goal","public_affected_ranges":["ECOSYSTEM: introduced 0; fixed 1.8.0-beta.27"]}],"null_published_at":"2026-10-31T22:13:01.466Z","source_updated_at":"2026-09-10T03:50:58.726Z","source_disclosed_at":"2025-12-02T00:38:41.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"First indexed by Null; source disclosure date is shown separately.","null_first_observed_at":"2026-10-31T21:42:20.435Z"}],"next_cursor":null,"snapshot_revision":"42594"}