What’s Vulnerable › Vulnerabilities

CVE-2021-3818: Reliance on Cookies without Validation and Integrity Checking in getgrav/grav

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-09-27 · updated 2026-06-17
• Weakness: CWE-565

Description

grav is vulnerable to Reliance on Cookies without Validation and Integrity Checking

Affected products

• getgrav grav: before 1.7.22 — fixed in 1.7.22

How to fix

Upgrade to a fixed version: getgrav grav 1.7.22. Check the vendor advisory for mitigations.

References

• https://github.com/getgrav/grav/commit/c51fb1779b83f620c0b6f3548d4a96322b55df07
• https://huntr.dev/bounties/c2bc65af-7b93-4020-886e-8cdaeb0a58ea
• https://github.com/getgrav/grav/commit/c51fb1779b83f620c0b6f3548d4a96322b55df07
• https://huntr.dev/bounties/c2bc65af-7b93-4020-886e-8cdaeb0a58ea

Get alerted when CVE-2021-3818 or the next vulnerability affects your stack