Vulnerability Database

314,373

Total vulnerabilities in the database

CVE-2025-66298

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, having a simple form on site can reveal the whole Grav configuration details (including plugin configuration details) by using the correct POST payload to exploit a Server-Side Template (SST) vulnerability. Sensitive information may be contained in the configuration details. This vulnerability is fixed in 1.8.0-beta.27.

  • Published: Dec 1, 2025
  • Updated: Dec 4, 2025
  • CVE: CVE-2025-66298
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWEs:

Software From Fixed in
Composer icon getgrav / grav - 1.8.0
Composer icon getgrav / grav 1.8.0-beta1 1.8.0-beta1.x
Composer icon getgrav / grav 1.8.0-beta10 1.8.0-beta10.x
Composer icon getgrav / grav 1.8.0-beta11 1.8.0-beta11.x
Composer icon getgrav / grav 1.8.0-beta12 1.8.0-beta12.x
Composer icon getgrav / grav 1.8.0-beta13 1.8.0-beta13.x
Composer icon getgrav / grav 1.8.0-beta14 1.8.0-beta14.x
Composer icon getgrav / grav 1.8.0-beta15 1.8.0-beta15.x
Composer icon getgrav / grav 1.8.0-beta16 1.8.0-beta16.x
Composer icon getgrav / grav 1.8.0-beta17 1.8.0-beta17.x
Composer icon getgrav / grav 1.8.0-beta18 1.8.0-beta18.x
Composer icon getgrav / grav 1.8.0-beta19 1.8.0-beta19.x
Composer icon getgrav / grav 1.8.0-beta2 1.8.0-beta2.x
Composer icon getgrav / grav 1.8.0-beta20 1.8.0-beta20.x
Composer icon getgrav / grav 1.8.0-beta21 1.8.0-beta21.x
Composer icon getgrav / grav 1.8.0-beta22 1.8.0-beta22.x
Composer icon getgrav / grav 1.8.0-beta23 1.8.0-beta23.x
Composer icon getgrav / grav 1.8.0-beta24 1.8.0-beta24.x
Composer icon getgrav / grav 1.8.0-beta25 1.8.0-beta25.x
Composer icon getgrav / grav 1.8.0-beta26 1.8.0-beta26.x
Composer icon getgrav / grav 1.8.0-beta3 1.8.0-beta3.x
Composer icon getgrav / grav 1.8.0-beta4 1.8.0-beta4.x
Composer icon getgrav / grav 1.8.0-beta5 1.8.0-beta5.x
Composer icon getgrav / grav 1.8.0-beta6 1.8.0-beta6.x
Composer icon getgrav / grav 1.8.0-beta7 1.8.0-beta7.x
Composer icon getgrav / grav 1.8.0-beta8 1.8.0-beta8.x
Composer icon getgrav / grav 1.8.0-beta9 1.8.0-beta9.x