https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 01:31:05 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-30342 cnvd-2025-30342 https://cve.radiocsirt.org/vuln/cnvd-2025-30342 https://cve.radiocsirt.org/vuln/euvd-2026-262246 EUVD-2026-262246 https://cve.radiocsirt.org/vuln/euvd-2026-262246 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66298 <p>Grav is a file-based Web platform. Prior to 1.8.0-beta.27, having a simple form on site can reveal the whole Grav configuration details (including plugin configuration details) by using the correct POST payload to exploit a Server-Side Template (SST) vulnerability. Sensitive information may be contained in the configuration details. This vulnerability is fixed in 1.8.0-beta.27.</p> <p>Grav is a file-based Web platform. Prior to 1.8.0-beta.27, having a simple form on site can reveal the whole Grav configuration details (including plugin configuration details) by using the correct POST payload to exploit a Server-Side Template (SST) vulnerability. Sensitive information may be contained in the configuration details. This vulnerability is fixed in 1.8.0-beta.27.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-66298 https://cve.radiocsirt.org/vuln/ghsa-8535-hvm8-2hmv <p><strong>Affected:</strong> Packagist: getgrav/grav</p> <p>### Summary Having a simple form on site can reveal the whole Grav configuration details (including plugin configuration details) by using the correct POST payload. Sensitive information may be contained in the configuration details.</p> <p>### PoC Create a simple form with two fields, &#39;registration-number&#39; and &#39;hp&#39;. Add a submit button and set the method to POST(screenshot attached below). Form name set to &#39;hero-form&#39;. Send a POST request with the following payload and you will notice a response with a php array listing the whole Grav configuration details - including plugins(screenshot attached).</p> <p>registration-number:d643aaaa</p> <p>hp:vJyifp</p> <p>__form-name__:hero-form</p> <p>__unique_form_id__:{{var_dump(_context|slice(0,7))}}</p> <p></p> <p></p> <p>### Impact Server-Side Template (SST) vulnerability. The vulnerability affects the latest Grav version as of 25th of Match 2025 (1.7.48) with all plugins installed (including forms plugin v.7.4.2) to their latest versions as well.</p> <p><strong>Affected:</strong> Packagist: getgrav/grav</p> <p>### Summary Having a simple form on site can reveal the whole Grav configuration details (including plugin configuration details) by using the correct POST payload. Sensitive information may be contained in the configuration details.</p> <p>### PoC Create a simple form with two fields, &#39;registration-number&#39; and &#39;hp&#39;. Add a submit button and set the method to POST(screenshot attached below). Form name set to &#39;hero-form&#39;. Send a POST request with the following payload and you will notice a response with a php array listing the whole Grav configuration details - including plugins(screenshot attached).</p> <p>registration-number:d643aaaa</p> <p>hp:vJyifp</p> <p>__form-name__:hero-form</p> <p>__unique_form_id__:{{var_dump(_context|slice(0,7))}}</p> <p></p> <p></p> <p>### Impact Server-Side Template (SST) vulnerability. The vulnerability affects the latest Grav version as of 25th of Match 2025 (1.7.48) with all plugins installed (including forms plugin v.7.4.2) to their latest versions as well.</p> https://cve.radiocsirt.org/vuln/ghsa-8535-hvm8-2hmv