Lucene search

K
osvGoogleOSV:CVE-2019-9942
HistoryMar 23, 2019 - 3:29 p.m.

CVE-2019-9942

2019-03-2315:29:00
Google
osv.dev
4

3.9 Low

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call the __toString() method on an object even if not allowed by the security policy in place.

Rows per page:
1-10 of 1321

3.9 Low

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%