Detections
Analytics

SCA: security update for getgrav/grav (GHSA-gjc5-8cfh-653x)

high Tenable Self-Hosted Container Security Plugin ID 437037

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Grav is a file-based Web platform. Prior to 1.8.0-beta.27, Grav CMS is vulnerable to a Server-Side
 Template Injection (SSTI) that allows any authenticated user with editor permissions to execute arbitrary
 code on the remote server, bypassing the existing security sandbox. Since the security sandbox does not
 fully protect the Twig object, it is possible to interact with it (e.g., call methods, read/write
 attributes) through maliciously crafted Twig template directives injected into a web page. This allows an
 authenticated editor to add arbitrary functions to the Twig attribute system.twig.safe_filters,
 effectively bypassing the Grav CMS sandbox. This vulnerability is fixed in 1.8.0-beta.27. (CVE-2025-66299)

See Also

https://github.com/advisories/GHSA-gjc5-8cfh-653x

Plugin Details

Severity: High

ID: 437037

Version: Revision 1.4

Type: Local

Family: SCA Checks

Published: 1/27/2026

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 6.9

Percentile: 96.95

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 9

Temporal Score: 7

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2025-66299

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 12/2/2025

Vulnerability Publication Date: 12/1/2025

Reference Information

CVE: CVE-2025-66299