Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:20786
HistoryJul 12, 2019 - 6:36 a.m.

Information Disclosure

2019-07-1206:36:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2

0.002 Low

EPSS

Percentile

61.9%

twig/twig is vulnerable to information disclosure. The __toString() function can be called on an object under certain circumstances despite having a security policy in place to restrict access to the resource.

CPENameOperatorVersion
twig/twigle2.6.2
twig/twigle1.37.1