Description (CNA)
Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list verdict is computed when a Template instance is constructed and can remain cached after sandbox state changes between renders, allowing a later sandboxed render to reuse a template that was originally checked with a different or empty policy. This issue is fixed in version 3.27.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| twigphp / Twig | affected < 3.27.0 |
CWE
CWE-693, CWE-863
References
- https://github.com/twigphp/Twig/security/advisories/GHSA-529h-vh3j-85hq
- https://github.com/twigphp/Twig/commit/23eb6eb1267cb0d303b91eb5cff9b0c559c538a4
- https://github.com/twigphp/Twig/releases/tag/v3.27.0
ADP enrichment
No English description supplied.
No references supplied.