1 matches found
Improper Neutralization of Special Elements Used in a Template Engine
Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine in the getTwigValue process. An attacker can execute arbitrary code by injecting malicious Twig templates into content fields that are rendered without sandboxing. Th...
8.8CVSS6.3AI score0.00549EPSS
SaveExploits0References2
20