Threats tagged 'ghsa-3446-6mgw-f79p'

Grav CMS versions prior to 2.0.0-beta.2 are vulnerable to an XML External Entity (XXE) injection via SVG file uploads. Authenticated attackers with admin panel access can upload malicious SVG files that exploit improper XML parsing to read arbitrary server files, perform SSRF, or cause denial of service. The vulnerability arises from using simplexml_load_string without disabling external entity loading. A fix has been applied in Grav 2.0.0-beta.2 and the associated SVG sanitizer library to strip dangerous XML declarations and disable external entity processing.