Lucene search
+L

1 matches found

OSV
OSV
added 2020/11/23 8:54 p.m.31 views

GHSA-R89V-CGV7-3JHX Bypass of fix for CVE-2020-15247, Twig sandbox escape

Impact A bypass of CVE-2020-15247 fixed in 1.0.469 and 1.1.0 was discovered that has the same impact as CVE-2020-15247: An authenticated backend user with the cms.managepages, cms.managelayouts, or cms.managepartials permissions who would normally not be permitted to provide PHP code to be execut...

5.2CVSS6AI score0.00289EPSS
SaveExploits0References4
Rows per page
Query Builder