getgrav grav-plugin-form up to 9.1.12 Redirect Process Grav::redirect

Summaryinfo

A vulnerability, which was classified as problematic, has been found in getgrav grav-plugin-form up to 9.1.12. The affected element is the function Grav::redirect of the component Redirect Process. The manipulation leads to redirect. This vulnerability is traded as CVE-2026-69087. It is possible to initiate the attack remotely. There is no exploit available.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in getgrav grav-plugin-form up to 9.1.12. This issue affects the function Grav::redirect of the component Redirect Process. The manipulation with an unknown input leads to a redirect vulnerability. Using CWE to declare the problem leads to CWE-601. A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks. Impacted is integrity. The summary by CVE is:

The Grav form plugin (getgrav/grav-plugin-form) before 9.1.13 contains an open redirect vulnerability. Since v9.1.11, the redirect process action evaluates user-supplied form data inside Twig expressions, and Grav::redirect() accepts external URLs without origin validation. When a form blueprint defines a redirect target such as redirect: "{{ form.value('next') }}" using an attacker-controllable field, an unauthenticated form submitter can supply a value like https://evil.com to cause a 302 redirect to an arbitrary external site, enabling phishing.

The advisory is shared at github.com. The identification of this vulnerability is CVE-2026-69087 since 08/03/2026. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1204.001 for this issue.

Upgrading to version 9.1.13 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-52280). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• getgrav

Name

• grav-plugin-form

Version

• 9.1.0
• 9.1.1
• 9.1.2
• 9.1.3
• 9.1.4
• 9.1.5
• 9.1.6
• 9.1.7
• 9.1.8
• 9.1.9
• 9.1.10
• 9.1.11
• 9.1.12

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion