Lucene search

K
cvelistMitreCVELIST:CVE-2019-9942
HistoryMar 23, 2019 - 2:31 p.m.

CVE-2019-9942

2019-03-2314:31:53
mitre
www.cve.org
1

4.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call the __toString() method on an object even if not allowed by the security policy in place.

4.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%