Vulnerability Database

314,373

Total vulnerabilities in the database

CVE-2025-66300

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A low privilege user account with page editing privilege can read any server files using "Frontmatter" form. This includes Grav user account files (/grav/user/accounts/*.yaml), which store hashed user password, 2FA secret, and the password reset token. This can allow an adversary to compromise any registered account by resetting a password for a user to get access to the password reset token from the file or by cracking the hashed password. This vulnerability is fixed in 1.8.0-beta.27.

  • Published: Dec 1, 2025
  • Updated: Dec 4, 2025
  • CVE: CVE-2025-66300
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.5
  • AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

CWEs:

OWASP TOP 10:

Software From Fixed in
Composer icon getgrav / grav - 1.8.0
Composer icon getgrav / grav 1.8.0-beta1 1.8.0-beta1.x
Composer icon getgrav / grav 1.8.0-beta10 1.8.0-beta10.x
Composer icon getgrav / grav 1.8.0-beta11 1.8.0-beta11.x
Composer icon getgrav / grav 1.8.0-beta12 1.8.0-beta12.x
Composer icon getgrav / grav 1.8.0-beta13 1.8.0-beta13.x
Composer icon getgrav / grav 1.8.0-beta14 1.8.0-beta14.x
Composer icon getgrav / grav 1.8.0-beta15 1.8.0-beta15.x
Composer icon getgrav / grav 1.8.0-beta16 1.8.0-beta16.x
Composer icon getgrav / grav 1.8.0-beta17 1.8.0-beta17.x
Composer icon getgrav / grav 1.8.0-beta18 1.8.0-beta18.x
Composer icon getgrav / grav 1.8.0-beta19 1.8.0-beta19.x
Composer icon getgrav / grav 1.8.0-beta2 1.8.0-beta2.x
Composer icon getgrav / grav 1.8.0-beta20 1.8.0-beta20.x
Composer icon getgrav / grav 1.8.0-beta21 1.8.0-beta21.x
Composer icon getgrav / grav 1.8.0-beta22 1.8.0-beta22.x
Composer icon getgrav / grav 1.8.0-beta23 1.8.0-beta23.x
Composer icon getgrav / grav 1.8.0-beta24 1.8.0-beta24.x
Composer icon getgrav / grav 1.8.0-beta25 1.8.0-beta25.x
Composer icon getgrav / grav 1.8.0-beta26 1.8.0-beta26.x
Composer icon getgrav / grav 1.8.0-beta3 1.8.0-beta3.x
Composer icon getgrav / grav 1.8.0-beta4 1.8.0-beta4.x
Composer icon getgrav / grav 1.8.0-beta5 1.8.0-beta5.x
Composer icon getgrav / grav 1.8.0-beta6 1.8.0-beta6.x
Composer icon getgrav / grav 1.8.0-beta7 1.8.0-beta7.x
Composer icon getgrav / grav 1.8.0-beta8 1.8.0-beta8.x
Composer icon getgrav / grav 1.8.0-beta9 1.8.0-beta9.x