Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-112781— Grav 2.0.0 before 2.2.2 Information Disclosure via Form config-*@ Directives

Quick assessment

Affected

getgrav grav

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Grav 2.0.0 至 2.2.2 版本之间存在一个信息泄露漏洞。该漏洞允许页面编辑者在页面 frontmatter 表单中添加指令，从而读取受保护的配置项。拥有页面编辑权限的攻击者可绕过 Twig 沙箱中对的过滤机制，将安全盐值（security.salt）、插件凭据以及 Redis 密码等敏感信息暴露给所有访问者。

CVSS 6.5 · Medium Updated Oct 20, 2026

Possible ATT&CK Techniques 2 AI

T1069 · Permission Groups Discovery T1190 · Exploit Public-Facing Application

Affected Version Matrix 2

Vendor	Product	Version Range	Status
getgrav	grav	`2.0.0< 2.2.2`	affected
		`2.2.2`	unaffected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Grav 2.0.0 before 2.2.2 Information Disclosure via Form config-*@ Directives

Source: CVE Program / CVE List V5

Vulnerability Description

Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read protected configuration by adding config-*@ directives to page frontmatter forms. Attackers with page-edit permission can bypass the Twig sandbox config_denied_paths redaction to expose security.salt, plugin credentials, and Redis passwords to all visitors.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

信息暴露

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
getgrav	grav	2.0.0 ~ 2.2.2	-

II. Public POCs for CVE-2026-112781

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-112781

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-112781 (2)

🔗 Page editor can read protected configuration through form config-*@ directives · Advisory · getgrav/grav · GitHub vendor-advisory
🔗 Page Not Found third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-112781

Same Patch Batch · getgrav · 2026-10-19 · 4 CVEs total

CVE-2026-112779	9.8 CRITICAL	Grav API Plugin before 1.0.42 Cache Exhaustion and Page Permission Bypass
CVE-2026-112780	8.8 HIGH	Grav 2.0.15 before 2.2.2 Arbitrary Static Method Call via Flex Form replace-name@
CVE-2026-112782	7.5 HIGH	Grav before 1.7.53.5 and 2.2.2 Image Pixel Limit Bypass Denial of Service

IV. Related Vulnerabilities

Same product: grav

Same vendor: getgrav

Same weakness: CWE-200

V. Comments for CVE-2026-112781

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-112781— Grav 2.0.0 before 2.2.2 Information Disclosure via Form config-*@ Directives

Quick assessment

Possible ATT&CK Techniques 2 AI

Affected Version Matrix 2

I. Basic Information for CVE-2026-112781

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-112781

III. Intelligence Information for CVE-2026-112781

Vendor Advisories for CVE-2026-112781 (2)

Same Patch Batch · getgrav · 2026-10-19 · 4 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-112781

Leave a comment