CVE-2015-7809

The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the _self variable in a template.

Published Bycve@mitre.org

Published DateNov 06, 2015, 21:59

Affected Versions(1)

twig/twig(Packagist)

Introduced0

Fixed1.20.0

LimitN/A

Package (Ecosystem)	Introduced	Fixed	Limit
twig/twig(Packagist)	0	1.20.0	N/A

Weakness Type (CWE):CWE-264

CVSS Metrics

Base Score

6.8

Vector String

AV:N/AC:M/Au:N/C:P/I:P/A:P

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

PARTIAL

References

http://openwall.com/lists/oss-security/2015/08/21/3
http://openwall.com/lists/oss-security/2015/10/11/2
http://symfony.com/blog/security-release-twig-1-20-0
http://www.debian.org/security/2015/dsa-3343
https://github.com/fabpot/Twig/commit/30be07759a3de2558da5224f127d052ecf492e8f
https://github.com/twigphp/Twig/pull/1759

Weakness Type (CWE):CWE-264

CVSS Metrics

Base Score

6.8

Vector String

AV:N/AC:M/Au:N/C:P/I:P/A:P

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

PARTIAL