Open Redirect in Grav

MEDIUM 6.1CVE-2020-11529 · GHSA-wrxc-mr2w-cjpv · Published 04/04/2020 · updated 17/06/2026

Package	Affected versions	Patched versions
getgrav/grav Packagist	`< 1.6.23`	`1.6.23`
grav getgrav	`≤ 1.6.31`	No fix yet

Description

Common/Grav.php in Grav before 1.6.23 has an Open Redirect.

NVD description

Common/Grav.php in Grav before 1.7 has an Open Redirect. This is partially fixed in 1.6.23 and still present in 1.6.x.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.