← Database

CVE-2024-45411

HIGH CVSS: 8.5 Published: 2024-09-09 Modified: 2026-06-17

Description

Twig is a template language for PHP. Under some circumstances, the sandbox security checks are not run which allows user-contributed templates to bypass the sandbox restrictions. This vulnerability is fixed in 1.44.8, 2.16.1, and 3.14.0.

Affected Platforms

Symfony Twig

Weakness Type

CWE-693, NVD-CWE-Other

References