Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 8 | twig | 1.16.2-1+deb8u1 |
Vulnerabilities 1
-
High 8.1
Twig remote code execution in templates
The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the _self variable in a template.