Grav 模板注入漏洞(CVE-2023-37897)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-37897
• https://avd.aliyun.com/detail?id=AVD-2023-37897
• https://cve.imfht.com/detail/CVE-2023-37897
• https://github.com/advisories/GHSA-9436-3gmp-4f53
• https://github.com/getgrav/grav/security/advisories/GHSA-96xv-rmwj-6p9w
• https://www.redpacketsecurity.com/grav-code-execution-cve-2023-37897/
• https://cve.imfht.com/detail/CVE-2023-37897?lang=en

Related Vulnerabilities

• PoCCVE-2026-41042: Apache Gravitino < 1.2.1 - Unauthenticated Remote Code Execution
• PoCCVE-2026-4020: Gravity SMTP WordPress Plugin - Sensitive Information Exposure
• PoCwp-gravity-forms-log-disclosure: WordPress Gravity Forms - Log File Disclosure
• Grav 代码注入漏洞
• PoCCVE-2014-4536: Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting
• PoCCVE-2015-4455: WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload
• PoCCVE-2016-1000139: WordPress Infusionsoft Gravity Forms <=1.5.11 - Cross-Site Scripting
• PoCCVE-2018-5233: Grav CMS <1.3.0 - Cross-Site Scripting
• PoCCVE-2020-11529: Grav < 1.7 - Open Redirect
• PoCgravatar-secure-csp-bypass: Content-Security-Policy Bypass - Gravatar Secure
• PoCgrav-register-admin: Grav Register Admin User - Detect
• WordPress plugin GravatarLocalCache 跨站请求伪造漏洞