Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-9942
HistoryMar 23, 2019 - 3:29 p.m.

Information disclosure

2019-03-2315:29:00
PRIOn knowledge base
www.prio-n.com
4

4.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call the __toString() method on an object even if not allowed by the security policy in place.

CPENameOperatorVersion
debian_linuxeq9.0
twiglt1.38.0
twigge2.0.0
twiglt2.7.0

4.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%