CNNVD-202512-015 Information

CNNVD ID

CNNVD-202512-015

CVE-2025-66305

  • CNNVD Published: 2025-12-01

Description (Chinese)

Grav是Grav开源的一套可扩展的用于个人博客、小型内容发布平台和单页产品展示的CMS(内容管理系统)。 Grav 1.8.0-beta.27之前版本存在安全漏洞,该漏洞源于输入验证不足,可能导致拒绝服务。

Description (English)

Grav is an extended set of CMS (Content Management System) for personal blogs, small content distribution platforms and single-page product presentations. The previous version of Grav 1.8.0-beta.27 had a security loophole, which stemmed from inadequate input validation and could lead to the denial of services.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Grav

Published

2025-12-01

Last Modified

2026-02-24

References

https://github.com/getgrav/grav/commit/ed640a13143c4177af013cf001969ed2c5e197ee https://github.com/getgrav/grav/security/advisories/GHSA-m8vh-v6r6-w7p6 https://access.redhat.com/security/cve/cve-2025-66305

Patch

https://getgrav.org/downloads

Share on: