Skip to content

CVE record · 1 source

CVE-2026-109315

CVSS 6.5

Grav from 2.0.22 before 2.1.7 contains an information disclosure vulnerability that allows page editors to read the Clockwork debugger token because…

Vendor: PHP
Product: PHP
CVSS: 6.5
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

8

CVE NVD 19d ago

Grav from 2.0.22 before 2.1.7 contains an information disclosure vulnerability that allows page editors to read the Clockwork debugger token because…

Grav from 2.0.22 before 2.1.7 contains an information disclosure vulnerability that allows page editors to read the Clockwork debugger token because the sandbox redaction list omits system.debugger.token. Attackers can render the…

CVSS 6.5 CVE-2026-109315 PHP