VulnerabilityModified
CVE-2020-11529
Common/Grav.php in Grav before 1.7 has an Open Redirect.
MEDIUM 6.1EPSS 10.9%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 10.9%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Common/Grav.php in Grav before 1.7 has an Open Redirect. This is partially fixed in 1.6.23 and still present in 1.6.x.
- CVSS 3.1
- 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 10.88% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-601
- Affected
- getgrav/grav
- Source
- cve@mitre.org
References
- https://getgrav.org/#changelogRelease Notes, Vendor Advisory
- https://github.com/getgrav/grav/commit/2eae104c7a4bf32bc26cb8073d5c40464bfda3f7Patch, Third Party Advisory
- https://github.com/getgrav/grav/issues/3134Third Party Advisory
- https://getgrav.org/#changelogRelease Notes, Vendor Advisory
- https://github.com/getgrav/grav/commit/2eae104c7a4bf32bc26cb8073d5c40464bfda3f7Patch, Third Party Advisory
- https://github.com/getgrav/grav/issues/3134Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.