Lucene search

K
osvGoogleOSV:CVE-2021-46433
HistoryMar 28, 2022 - 11:15 a.m.

CVE-2021-46433

2022-03-2811:15:07
Google
osv.dev
6
fenom
template
sandbox
vulnerability
php code
bypass

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

53.3%

In fenom 2.12.1 and before, there is a way in fenom/src/Fenom/Template.php function getTemplateCode()to bypass sandbox to execute arbitrary PHP code when disable_native_funcs is true.

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

53.3%

Related for OSV:CVE-2021-46433