Lucene search
+L

6 matches found

NVD
NVD
added 2026/08/25 4:17 p.m.8 views

CVE-2026-79774

Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\Twig\SecurityPolicy that allows authenticated backend users with template-editing permissions to bypass sandbox restrictions. Attackers can exploit method forwarding through Eloquent...

9.3CVSS0.0043EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/25 3:16 p.m.30 views

CVE-2026-79774

Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape in System\Twig\SecurityPolicy. Authenticated backend users with template-editing permissions can bypass sandbox restrictions by exploiting method forwarding through Eloquent models and query builders (e.g., save...

9.3CVSS6.6AI score0.0043EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/25 3:16 p.m.13 views

EUVD-2026-65532

Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\Twig\SecurityPolicy that allows authenticated backend users with template-editing permissions to bypass sandbox restrictions. Attackers can exploit method forwarding through Eloquent...

9.3CVSS6.6AI score0.0043EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/25 3:16 p.m.4 views

CVE-2026-79774 Winter CMS before 1.2.13 Twig Sandbox Escape via SecurityPolicy

Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\Twig\SecurityPolicy that allows authenticated backend users with template-editing permissions to bypass sandbox restrictions. Attackers can exploit method forwarding through Eloquent...

9.3CVSS6.8AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/03/20 8:09 a.m.39 views

CVE-2026-33192 free5GC UDM incorrectly returns 500 for empty supi path parameter in PATCH sdm-subscriptions reques

Free5GC is an open-source Linux Foundation project for 5th generation 5G mobile core networks. In versions prior to 1.4.2, the UDM incorrectly converts a downstream 400 Bad Request from UDR into a 500 Internal Server Error when handling PATCH requests with an empty supi path parameter...

8.7CVSS0.00321EPSS
SaveExploits1References3
OSV
OSV
added 2017/06/06 12:00 a.m.11 views

UBUNTU-CVE-2017-5664

The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the request is presented to the error page with the origin...

7.5CVSS7.1AI score0.16567EPSS
SaveExploits1References5
Rows per page
Query Builder