Miggo Logo
Miggo Vulnerability Database
→
CVE-2020-29556

CVE-2020-29556: Grav CMS Local File Injection

5.5

CVSS Score
3.1

Basic Information

CVE ID
CVE-2020-29556
GHSA ID
GHSA-r3rg-jrjq-w4mr
EPSS Score
0.29438%
CWE
CWE-22
Published
5/24/2022
Updated
4/24/2024
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
getgrav/gravcomposer>= 1.7.0-beta.1, <= 1.7.0-rc.17
getgrav/gravcomposer< 1.6.301.6.30

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability exists in the backup functionality's file handling. The BackupController's taskBackup method likely processes user-supplied filenames without adequate sanitization, enabling path traversal through '../' sequences. This matches the CWE-22 pattern and the advisory's description of arbitrary file read via path manipulation. The admin plugin's backup feature is the primary affected component, and controller methods handling file operations would be the logical location for this vulnerability.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

T** ***kup *un*tion*lity in *r*v *MS t*rou** *.*.*-r*.** *llows *n *ut**nti**t** *tt**k*r to r*** *r*itr*ry lo**l *il*s on t** un**rlyin* s*rv*r *y *xploitin* * p*t*-tr*v*rs*l t***niqu*. (T*is vuln*r**ility **n *lso ** *xploit** *y *n un*ut**nti**t**

Reasoning

T** vuln*r**ility *xists in t** ***kup *un*tion*lity's *il* **n*lin*. T** `***kup*ontroll*r`'s `t*sk***kup` m*t*o* lik*ly pro**ss*s us*r-suppli** *il*n*m*s wit*out ***qu*t* s*nitiz*tion, *n**lin* p*t* tr*v*rs*l t*rou** '../' s*qu*n**s. T*is m*t***s t