https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 14:20:23 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-30350 cnvd-2025-30350 https://cve.radiocsirt.org/vuln/cnvd-2025-30350 https://cve.radiocsirt.org/vuln/euvd-2026-262248 EUVD-2026-262248 https://cve.radiocsirt.org/vuln/euvd-2026-262248 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66300 <p>Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A low privilege user account with page editing privilege can read any server files using &#34;Frontmatter&#34; form. This includes Grav user account files (/grav/user/accounts/*.yaml), which store hashed user password, 2FA secret, and the password reset token. This can allow an adversary to compromise any registered account by resetting a password for a user to get access to the password reset token from the file or by cracking the hashed password. This vulnerability is fixed in 1.8.0-beta.27.</p> <p>Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A low privilege user account with page editing privilege can read any server files using &#34;Frontmatter&#34; form. This includes Grav user account files (/grav/user/accounts/*.yaml), which store hashed user password, 2FA secret, and the password reset token. This can allow an adversary to compromise any registered account by resetting a password for a user to get access to the password reset token from the file or by cracking the hashed password. This vulnerability is fixed in 1.8.0-beta.27.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-66300 https://cve.radiocsirt.org/vuln/ghsa-p4ww-mcp9-j6f2 <p><strong>Affected:</strong> Packagist: getgrav/grav</p> <p>### Summary</p> <p>- A low privilege user account with page editing privilege can read any server files using &#34;Frontmatter&#34; form. - This includes Grav user account files - /grav/user/accounts/*.yaml. This file stores hashed user password, 2FA secret, and the password reset token. - This can allow an adversary to compromise any registered account by resetting a password for a user to get access to the password reset token from the file or by cracking the hashed password.</p> <p>### Details _The vulnerability can be found in /user/plugins/form/templates/forms/fields/display/display.html.twig_ </p> <p>### PoC 1. This PoC was conducted on Grav CMS version 1.7.46 and Admin Plugin version 1.10.46 </p> <p>2. go to “http://grav.local/admin/pages” then create new page with “Page Template” option set to “Form”. </p> <p>3. Then go to “Expert” and on Frontmatter input box used to following form template.</p> <p></p> <p>4. Save page and go the preview or published page you will see the content of “/etc/passwd” file on the server. </p> <p>### Impact This can allow a…</p> <p><strong>Affected:</strong> Packagist: getgrav/grav</p> <p>### Summary</p> <p>- A low privilege user account with page editing privilege can read any server files using &#34;Frontmatter&#34; form. - This includes Grav user account files - /grav/user/accounts/*.yaml. This file stores hashed user password, 2FA secret, and the password reset token. - This can allow an adversary to compromise any registered account by resetting a password for a user to get access to the password reset token from the file or by cracking the hashed password.</p> <p>### Details _The vulnerability can be found in /user/plugins/form/templates/forms/fields/display/display.html.twig_ </p> <p>### PoC 1. This PoC was conducted on Grav CMS version 1.7.46 and Admin Plugin version 1.10.46 </p> <p>2. go to “http://grav.local/admin/pages” then create new page with “Page Template” option set to “Form”. </p> <p>3. Then go to “Expert” and on Frontmatter input box used to following form template.</p> <p></p> <p>4. Save page and go the preview or published page you will see the content of “/etc/passwd” file on the server. </p> <p>### Impact This can allow a…</p> https://cve.radiocsirt.org/vuln/ghsa-p4ww-mcp9-j6f2