CVE-2024-28116
HIGHGrav < 1.7.45 - Authenticated Server-Side Template Injection
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2024-28116. PoCs published by geniuszly, akabe1, gunzf0x.
AI-analyzed exploit summary This PoC exploits an authenticated Server-Side Template Injection (SSTI) vulnerability in Grav CMS <= 1.7.44 (CVE-2024-28116) to achieve remote command execution. It automates authentication, session handling, and payload injection via Twig template manipulation.
Description
Grav is an open-source, flat-file content management system. Grav CMS prior to version 1.7.45 is vulnerable to a Server-Side Template Injection (SSTI), which allows any authenticated user (editor permissions are sufficient) to execute arbitrary code on the remote server bypassing the existing security sandbox. Version 1.7.45 contains a patch for this issue.
Exploits (3)
This PoC exploits an authenticated Server-Side Template Injection (SSTI) vulnerability in Grav CMS <= 1.7.44 (CVE-2024-28116) to achieve remote command execution. It automates authentication, session handling, and payload injection via Twig template manipulation.
This is a functional PoC for CVE-2024-28116, an authenticated SSTI+RCE vulnerability in Grav CMS <=1.7.44. It automates the exploitation process by authenticating, creating a malicious page, and injecting an RCE payload.
This is a Python-based exploit for CVE-2024-28116, targeting Grav CMS with an authenticated RCE vulnerability. It automates the process of logging in, creating a malicious page, and executing arbitrary commands via crafted payloads.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H