CVE-2024-45411 — Twig has a possible sandbox bypass
Twig is a template language for PHP. Under some circumstances, the sandbox security checks are not run which allows user-contributed templates to bypass the sandbox restrictions…
Published: 2024-09-09 · CVSS: 8.6 · CVSS 3.1
Twig is a template language for PHP. Under some circumstances, the sandbox security checks are not run which allows user-contributed templates to bypass the sandbox restrictions. This vulnerability is fixed in 1.44.8, 2.16.1, and 3.14.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7