Directory Traversal in Grav CMS allows a remote attacker to navigate the server file structure via the mediaDirFunc method in GravExtension.php. The vulnerability results in the disclosure of sensitive information, exposing files that should be protected. The weakness is a classic path traversal flaw, classified under CWE-200 for information exposure and CWE-22 for directory traversal.

Grav CMS versions 2.0.3 through 2.0.6 are affected. The issue tracks the core GravExtension.php component and is documented in the 2.0.6 source tree. No other vendors or product variants are listed.

The CVSS score of 6.5 indicates a moderate impact. The EPSS of 1% suggests a low but non‑zero probability of exploitation in the wild. The vulnerability is not yet listed in the CISA KEV catalogue. Based on the description, the likely attack vector is remote via a web request to a Grav-powered site. Successful exploitation would allow an attacker to read arbitrary files and potentially gather credentials or other sensitive data.