CVE-2024-28118

Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to twig extension class from Grav context, an attacker can redefine config variable. As a result, attacker can bypass a previous SSTI mitigation. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code execution and elevate privileges on the instance. Version 1.7.45 contains a fix for this issue.

• CWE-94
• CWE-94

• https://github.com/getgrav/grav/commit/de1ccfa12dbcbf526104d68c1a6bc202a98698fePatch
• https://github.com/getgrav/grav/security/advisories/GHSA-r6vw-8v8r-pmp4Exploit, Vendor Advisory
• https://github.com/getgrav/grav/commit/de1ccfa12dbcbf526104d68c1a6bc202a98698fePatch
• https://github.com/getgrav/grav/security/advisories/GHSA-r6vw-8v8r-pmp4Exploit, Vendor Advisory

Published

Mar 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-28112Peering Manager is a BGP session management tool. Affected v…4.8
• CVE-2024-28113Peering Manager is a BGP session management tool. In Peering…6.1
• CVE-2024-28114Peering Manager is a BGP session management tool. There is a…9.1
• CVE-2024-28115FreeRTOS is a real-time operating system for microcontroller…7.8
• CVE-2024-28116Grav is an open-source, flat-file content management system.…8.8
• CVE-2024-28117Grav is an open-source, flat-file content management system.…8.8
• CVE-2024-28119Grav is an open-source, flat-file content management system.…8.8
• CVE-2024-2812A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20…8.8
• CVE-2024-28120codeium-chrome is an open source code completion plugin for …7.5
• CVE-2024-28121stimulus_reflex is a system to extend the capabilities of bo…8.8
• CVE-2024-28122 JWX is Go module implementing various JWx (JWA/JWE/JWK/JWS/…6.8
• CVE-2024-28123Wasmi is an efficient and lightweight WebAssembly interprete…9.8