Archive
6 November 2015
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High 8.1
Twig remote code execution in templates
The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the _self variable in a template.