CVE-2025-66305 | grav up to 1.8.0-beta.27 /admin/config/system uncaught exception (GHSA-m8vh-v6r6-w7p6)

December 1, 2025 Yanac

A vulnerability classified as problematic was found in grav up to 1.8.0-beta.27. Affected by this issue is some unknown functionality of the file /admin/config/system. Executing manipulation can lead to uncaught exception.

This vulnerability appears as CVE-2025-66305. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More