Critical Ā· published December 15, 2025
šØ A sneaky SSRF vulnerability in Grav versions <1.7.49.5 lets attackers send requests to internal resources just by playing with Twig templates! š„ Think of this as a waiter who mistakenly delivers a message to the wrong tableāan attacker could trick the server into fetching sensitive data from behind your firewall as easily as ordering dessert! š° This could lead to an attacker gaining access to internal services, like databases or admin panels, putting your entire infrastructure at risk. Imagine someone being able to peek behind the curtains of your operationsāabsolutely devastating!
Think of this as a waiter who mistakenly delivers a message to the wrong tableāan attacker could trick the server into fetching sensitive data from behind your firewall as easily as ordering dessert! š° This vulnerability exploits a Server-Side Request Forgery (SSRF) flaw in Grav when using Twig templates that allow unvalidated PHP functions to be registered, permitting unauthorized requests to internal resources.
This could lead to an attacker gaining access to internal services, like databases or admin panels, putting your entire infrastructure at risk. Imagine someone being able to peek behind the curtains of your operationsāabsolutely devastating! Immediately upgrade to version 1.7.49.5 or later to patch this vulnerability. Additionally, review your configuration to ensure that only safe, defined functions are allowed within your Twig templates. Regularly audit your settings to keep security tight! You've got this! Implement these fixes and reinforce your defenses! š”ļø
| Product | Versions | Fixed in |
|---|---|---|
| getgrav/grav | < 1.7.49.5 | 1.7.49.5 |