Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 101
Reset filtersServer Side Template Injection (SSTI) via Twig escape handler
Server Side Template Injection (SSTI)
Server Side Template Injection (SSTI)
Server-Side Template Injection (SSTI) with Grav CMS security sandbox bypass
Grav File Upload Path Traversal
Remote Code Execution by uploading a phar file using frontmatter
Cross-site scripting (XSS) vulnerability in Grav
grav Server-side Template Injection (SSTI) mitigation bypass
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Grav Server Side Template Injection (SSTI) vulnerability
Code injection in grav
Grav CMS Local File Injection
Grav CMS Arbitrary File Deletion
Grav CMS Cross-Site Request Forgery (CSRF)
Grav CMS Cross-site scripting (XSS) vulnerability
Stored cross site scripting in getgrav/grav
Stored Cross-site Scripting in grav
Cross site scripting in getgrav/grav
Cross-site Scripting in grav
Open Redirect in Grav
Path traversal in grav
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.