Skip to content
OpenAdvisories

Archive

6 November 2015

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 8.1

    Twig remote code execution in templates

    The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the _self variable in a template.