by Kastro
Paper/Archive/CVE-2022-2073

CVE-2022-2073

getgrav getgrav/grav — Code Injection in getgrav/grav

EPSS 11%CVSS 9.1
critical.is priorityof 100
47
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 95.9.959 × 2019.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Code Injection in GitHub repository getgrav/grav prior to 1.7.34.

Affected

ProductAffectedFixed inSource
getgrav/gravunspecified – < 1.7.341.7.34CNA

Scores by source

@huntrdev (CNA)9.1CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

refhuntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66refgithub.com/getgrav/grav/commit/9d6a2dba09fd4e56f5cdfb9a399caea355bfeb83