Twig Template Language Vulnerability Affects Sandbox Security
CVE-2024-45411
8.6HIGH
What is CVE-2024-45411?
Twig, the popular template language for PHP, contains a vulnerability that compromises sandbox security checks under specific conditions. This flaw enables user-contributed templates to bypass the intended sandbox restrictions, potentially allowing untrusted input to execute arbitrary code in a restricted environment. The issue affects versions of Twig prior to 1.44.8, 2.16.1, and 3.14.0, necessitating prompt updates to mitigate possible security risks.
Affected Version(s)
Twig > 1.0.0, < 1.44.8 > 1.0.0, 1.44.8
Twig > 2.0.0, < 2.16.1 > 2.0.0, 2.16.1
Twig > 3.0.0, < 3.14.0 > 3.0.0, 3.14.0