CVE-2024-51755CWE-668

Unguarded calls to __isset() and to array-accesses when the sandbox is enabled in Twig

Low · published November 6, 2024

CVSS v3.1
2.2
EPSS
0%
Percentile
35.8
In the wild
Unconfirmed
What it is

Twig is a template language for PHP. In a sandbox, an attacker can access attributes of Array-like objects as they were not checked by the security policy. They are now checked via the property policy and the `__isset()` method is now called after the security check. This is a BC break. This issue has been patched in versions 3.11.2 and 3.14.1. All users are advised to upgrade. There are no known workarounds for this issue.

The record
Technical detail
CVSS v3.1
2.2 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00425 · 35.8th percentile
Weakness
CWE-668 · Exposure of Resource to Wrong Sphere
Published
2024-11-06T19:27Z
EPSS history
Timeline
  • 06 NOV 19:27Z
    Unguarded calls to __isset() and to array-accesses when the sandbox is enabled in Twig
    cvelistv5