Kurz gesagt
- CVE-2024-51755 ist eine Schwachstelle (NIEDRIG (CVSS 2.2)) in twig/twig.
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.43%, höher als bei 36.8% aller Schwachstellen.
- Abhilfe: auf 3.14.1, 3.11.2 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| twig/twig Packagist | ≥ 3.12, < 3.14.1< 3.11.2
| 3.14.13.11.2
|
Description
Description
In a sandbox, and attacker can access attributes of Array-like objects as they were not checked by the security policy.
They are now checked via the property policy and the __isset() method is now called after the security check.
This is a BC break.
Resolution
The sandbox mode now ensures access to array-like's properties is allowed.
The patch for this issue is available here for the 3.11.x branch, and here for the 3.x branch.
Credits
We would like to thank Jamie Schouten for reporting the issue and Nicolas Grekas for providing the fix.
NVD description
Twig is a template language for PHP. In a sandbox, an attacker can access attributes of Array-like objects as they were not checked by the security policy. They are now checked via the property policy and the `__isset()` method is now called after the security check. This is a BC break. This issue has been patched in versions 3.11.2 and 3.14.1. All users are advised to upgrade. There are no known workarounds for this issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free