CVE-2018-13818

概要

参考情報

• twigphp/Twig · Release Notes
• twigphp/Twig commit eddb971 · Patch
• twigphp/Twig · Exploit
• mobile.twitter.com/jameel_nabbo/status/1032593354704515072 · Exploit
• exploit-db.com/exploits/44102 · Exploit

twig のその他の脆弱性

• CVE-2026-49981高 8.2Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list verdict is computed when a Templ…
• CVE-2026-48808高 7.5Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but does not forward th…
• CVE-2026-48807緊急 9.1Twig is a template language for PHP. Prior to 3.27.0, the sandbox __toString() checks do not fully cover Traversable values passed to join a…
• CVE-2026-48806緊急 9.1Twig is a template language for PHP. Prior to 3.27.0, ArrayExpression does not guard dynamic mapping keys that are coerced to strings, allow…
• CVE-2026-48805緊急 9.1Twig is a template language for PHP. Prior to 3.27.0, deprecated internal wrappers in src/Resources/core.php do not forward the current sand…