yhz66 Sandbox Information Disclosure Vulnerability

yhz66 Sandbox is an encrypted pure intranet instant messaging software from China Cloud Box yhz66. An information disclosure vulnerability exists in yhz66 Sandbox version 6.1.0, which stems from the presence of an information disclosure vulnerability...

PT-2019-1920 · Twig +2 · Twig +2

Name of the Vulnerable Software and Affected Versions: Twig versions prior to 1.38.0 Twig versions 2.x prior to 2.7.0 Description: A sandbox information disclosure issue exists because, under some circumstances, it is possible to call the toString method on an object even if not allowed by the...