{"id":"CVE-2020-29556","details":"The Backup functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to read arbitrary local files on the underlying server by exploiting a path-traversal technique. (This vulnerability can also be exploited by an unauthenticated attacker due to a lack of CSRF protection.)","aliases":["GHSA-r3rg-jrjq-w4mr"],"modified":"2026-08-07T11:31:32.669920384Z","published":"2021-03-15T18:15:17.317Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:getgrav:grav_cms:1.7.0:beta10:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:beta1:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:beta2:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:beta3:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:beta4:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:beta5:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:beta6:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:beta7:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:beta8:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:beta9:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc10:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc11:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc12:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc13:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc14:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc15:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc16:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc17:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc1:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc20:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc2:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc3:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc4:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc5:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc6:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc7:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc8:*:*:*:*:*:*","cpe:2.3:a:getgrav:grav_cms:1.7.0:rc9:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.7.0-beta1"},{"last_affected":"1.7.0-beta1"},{"introduced":"1.7.0-beta10"},{"last_affected":"1.7.0-beta10"},{"introduced":"1.7.0-beta2"},{"last_affected":"1.7.0-beta2"},{"introduced":"1.7.0-beta3"},{"last_affected":"1.7.0-beta3"},{"introduced":"1.7.0-beta4"},{"last_affected":"1.7.0-beta4"},{"introduced":"1.7.0-beta5"},{"last_affected":"1.7.0-beta5"},{"introduced":"1.7.0-beta6"},{"last_affected":"1.7.0-beta6"},{"introduced":"1.7.0-beta7"},{"last_affected":"1.7.0-beta7"},{"introduced":"1.7.0-beta8"},{"last_affected":"1.7.0-beta8"},{"introduced":"1.7.0-beta9"},{"last_affected":"1.7.0-beta9"},{"introduced":"1.7.0-rc1"},{"last_affected":"1.7.0-rc1"},{"introduced":"1.7.0-rc10"},{"last_affected":"1.7.0-rc10"},{"introduced":"1.7.0-rc11"},{"last_affected":"1.7.0-rc11"},{"introduced":"1.7.0-rc12"},{"last_affected":"1.7.0-rc12"},{"introduced":"1.7.0-rc13"},{"last_affected":"1.7.0-rc13"},{"introduced":"1.7.0-rc14"},{"last_affected":"1.7.0-rc14"},{"introduced":"1.7.0-rc15"},{"last_affected":"1.7.0-rc15"},{"introduced":"1.7.0-rc16"},{"last_affected":"1.7.0-rc16"},{"introduced":"1.7.0-rc17"},{"last_affected":"1.7.0-rc17"},{"introduced":"1.7.0-rc2"},{"last_affected":"1.7.0-rc2"},{"introduced":"1.7.0-rc20"},{"last_affected":"1.7.0-rc20"},{"introduced":"1.7.0-rc3"},{"last_affected":"1.7.0-rc3"},{"introduced":"1.7.0-rc4"},{"last_affected":"1.7.0-rc4"},{"introduced":"1.7.0-rc5"},{"last_affected":"1.7.0-rc5"},{"introduced":"1.7.0-rc6"},{"last_affected":"1.7.0-rc6"},{"introduced":"1.7.0-rc7"},{"last_affected":"1.7.0-rc7"},{"introduced":"1.7.0-rc8"},{"last_affected":"1.7.0-rc8"},{"introduced":"1.7.0-rc9"},{"last_affected":"1.7.0-rc9"}],"source":"CPE_STRING","vendor_product":"getgrav:grav_cms"}]},"references":[{"type":"FIX","url":"https://blog.bssi.fr/cve-2020-29553-cve-2020-29555-cve-2020-29556-multiple-vulnerabilities-within-cms-grav/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/getgrav/grav","events":[{"introduced":"0"},{"fixed":"916b7cfc44d4d1e153cf5752c908124abe3167ef"}],"database_specific":{"cpe":"cpe:2.3:a:getgrav:grav_cms:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.7.0"}],"source":"CPE_RANGE"}}],"versions":["1.7.0-rc.20","1.7.0-rc.19","1.7.0-rc.18","1.7.0-rc.17","1.7.0-rc.15","1.7.0-rc.14","1.7.0-rc.13","1.7.0-rc.12","1.7.0-rc.10","1.7.0-rc.9","1.7.0-rc.8","1.7.0-rc.7","1.7.0-rc.6","1.7.0-rc.5","1.7.0-rc.4","1.7.0-rc.3","1.7.0-rc.2","1.7.0-rc.1","1.7.0-beta.10","1.7.0-beta.9","1.7.0-beta.8","1.7.0-beta.7","1.7.0-beta.6","1.7.0-beta.5","1.7.0-beta.4","1.7.0-beta.3","1.7.0-beta.2","1.7.0-beta.1","1.6.0-rc.4","1.6.0-rc.3","1.6.0-rc.2","1.6.0-rc.1","1.6.0-beta.8","1.6.0-beta.7","1.6.0-beta.6","1.6.0-beta.5","1.6.0-beta.2","1.6.0-beta.1","1.5.0-rc.1","1.5.0-beta.2","1.5.0-beta.1","1.3.0-rc.5","1.3.0-rc.4","1.3.0-rc.3","1.3.0-rc.1","1.2.0-rc.3","1.2.0-rc.2","1.2.0-rc.1","1.1.9-rc.3","1.1.9-rc.2","1.1.9-rc.1","1.1.0-rc.3","1.1.0-rc.2","1.1.0-rc.1","1.1.0-beta.5","1.1.0-beta.4","1.1.0-beta.3","1.1.0-beta.2","1.1.0-beta.1","0.9.19","0.9.18","0.9.17","0.9.16","0.9.15","0.9.14","0.9.13","0.9.12","0.9.11","0.9.10","0.9.9","0.9.8","0.9.7","0.9.6","0.9.5","0.9.4","0.9.3","0.9.2","0.9.0","0.8.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-29556.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}