Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-46433
HistoryMar 28, 2022 - 11:15 a.m.

Spoofing

2022-03-2811:15:00
PRIOn knowledge base
www.prio-n.com
2
spoofing
fenom
template restrictions
php code execution
security vulnerability

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

53.3%

In fenom 2.12.1 and before, there is a way in fenom/src/Fenom/Template.php function getTemplateCode()to bypass sandbox to execute arbitrary PHP code when disable_native_funcs is true.

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

53.3%

Related for PRION:CVE-2021-46433