CVE-2020-29556

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2021-03-15 · updated 2026-06-17
Weakness: CWE-22

Description

The Backup functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to read arbitrary local files on the underlying server by exploiting a path-traversal technique. (This vulnerability can also be exploited by an unauthenticated attacker due to a lack of CSRF protection.)

Affected products

getgrav Grav Cms: before 1.7.0; 1.7.0-beta1, 1.7.0-beta10, 1.7.0-beta2, 1.7.0-beta3, 1.7.0-beta4, 1.7.0-beta5 (+22) — fixed in 1.7.0

How to fix

Upgrade to a fixed version: getgrav Grav Cms 1.7.0. Check the vendor advisory for mitigations.

References

https://blog.bssi.fr/cve-2020-29553-cve-2020-29555-cve-2020-29556-multiple-vulnerabilities-within-cms-grav/
https://blog.bssi.fr/cve-2020-29553-cve-2020-29555-cve-2020-29556-multiple-vulnerabilities-within-cms-grav/

Get alerted when CVE-2020-29556 or the next vulnerability affects your stack