CVE-2015-7809

The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the self variable in a template...

PT-2015-7622

Name of the Vulnerable Software and Affected Versions Sensio Labs Twig versions prior to 1.20.0 Description The issue allows remote attackers to execute arbitrary code via the self variable in a template when Sandbox mode is enabled. This is related to the displayBlock function in Template.php...