Approved changes feed: RSS · Atom

cpe:2.3:a:getgrav:getgrav/grav:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGetgrav (a335dd59-994b-520f-884a-04ce57f966e0)
ProductGetgrav/Grav (1919cf4f-c374-5147-9832-7749ccfe16cb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2073 vulnerable 2026-06-08 05:42:50.213879 Code Injection in getgrav/grav
CRITICAL (9.1)
Code Injection in GitHub repository getgrav/grav prior to 1.7.34.
Published: 2022-06-29T18:20:11.000Z
Updated: 2024-08-03T00:24:44.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1173 vulnerable 2026-06-08 05:39:12.355790 stored xss in getgrav/grav
HIGH (8.2)
stored xss in GitHub repository getgrav/grav prior to 1.7.33.
Published: 2022-04-26T16:06:42.000Z
Updated: 2024-08-02T23:55:24.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0970 vulnerable 2026-06-08 05:39:11.592424 Cross-site Scripting (XSS) - Stored in getgrav/grav
HIGH (7.1)
Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.
Published: 2022-03-15T16:40:10.000Z
Updated: 2024-08-02T23:47:42.914Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0743 vulnerable 2026-06-08 05:39:10.747646 Cross-site Scripting (XSS) - Stored in getgrav/grav
MEDIUM (4.6)
Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.
Published: 2022-02-28T23:00:12.000Z
Updated: 2024-08-02T23:40:03.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0268 vulnerable 2026-06-08 05:39:09.639799 Cross-site Scripting (XSS) - Stored in getgrav/grav
MEDIUM (5.7)
Cross-site Scripting (XSS) - Stored in Packagist getgrav/grav prior to 1.7.28.
Published: 2022-01-25T10:40:11.000Z
Updated: 2024-08-02T23:25:39.494Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3924 vulnerable 2026-06-08 05:33:54.583586 Path Traversal in getgrav/grav
HIGH (8.8)
grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2021-11-05T14:50:20.000Z
Updated: 2024-08-03T17:09:09.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3904 vulnerable 2026-06-08 05:33:54.496330 Cross-site Scripting (XSS) - Stored in getgrav/grav
MEDIUM (6.3)
grav is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2021-10-27T21:10:15.000Z
Updated: 2024-08-03T17:09:09.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3818 vulnerable 2026-06-08 05:33:54.372767 Reliance on Cookies without Validation and Integrity Checking in getgrav/grav
MEDIUM (6.3)
grav is vulnerable to Reliance on Cookies without Validation and Integrity Checking
Published: 2021-09-27T12:25:23.000Z
Updated: 2024-08-03T17:09:09.606Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.