Lucene search
+L

1 matches found

OSV
OSV
added 2023/03/13 10:55 a.m.4 views

USN-5947-1 php-twig, twig vulnerabilities

Fabien Potencier discovered that Twig was not properly enforcing sandbox policies when dealing with objects automatically cast to strings by PHP. An attacker could possibly use this issue to expose sensitive information. This issue was only fixed in Ubuntu 16.04 ESM and Ubuntu 18.04 ESM...

9.8CVSS7AI score0.08209EPSS
SaveExploits3References4
Rows per page
Query Builder