CVE-2021-3924

Description

grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected packages (1)

• Packagist/getgrav/gravfrom 0, <= 1.7.24

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-3924
• PATCHhttps://github.com/getgrav/grav
• WEBhttps://github.com/getgrav/grav/commit/8f9c417c04b89dc8d2de60b95e7696821b2826ce
• WEBhttps://huntr.dev/bounties/7ca13522-d0c9-4eff-a7dd-6fd1a7f205a2