medium6.5
CVE-2026-78851
Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the me…
Impact
Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.
Affected products
| Product | Affected versions |
|---|---|
| Grav CMS 2.0.3 | through 2.0.6 |
Versions were read from the advisory text. No structured product data has been published for this record yet.