-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| getgrav/grav | composer | < 1.7.45 | 1.7.45 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from the unrestricted access to Twig's EscaperExtension::setEscaper method in Grav's Twig environment. This method accepts a callable argument without validation, enabling attackers to register PHP functions like system as escapers. The PoC demonstrates this by setting twig_array_filter (a valid callable) as the 'system' escaper and triggering it via the escape filter. Grav's patch explicitly blocks access to core.setEscaper in Security::cleanDangerousTwig, confirming its role in the exploit chain. The function's design (lack of input validation) combined with Grav's insecure exposure of the method to template processing creates the vulnerability.
PHPPHPOngoing coverage of React2Shell