Lucene search

K
cvelistMitreCVELIST:CVE-2020-28925
HistoryDec 30, 2020 - 6:47 p.m.

CVE-2020-28925

2020-12-3018:47:18
mitre
www.cve.org
1
bolt
twig
request
filter
inconsistency
php security guidance

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

30.9%

Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the “How to Harden Your PHP for Better Security” guidance.

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

30.9%