CVE-2018-13818

Mô tả

Tham khảo

• twigphp/Twig · Release Notes
• twigphp/Twig commit eddb971 · Patch
• twigphp/Twig · Exploit
• mobile.twitter.com/jameel_nabbo/status/1032593354704515072 · Exploit
• exploit-db.com/exploits/44102 · Exploit

Lỗ hổng khác của twig

• CVE-2026-49981CAO 8.2Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list verdict is computed when a Templ…
• CVE-2026-48808CAO 7.5Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but does not forward th…
• CVE-2026-48807NGHIÊM TRỌNG 9.1Twig is a template language for PHP. Prior to 3.27.0, the sandbox __toString() checks do not fully cover Traversable values passed to join a…
• CVE-2026-48806NGHIÊM TRỌNG 9.1Twig is a template language for PHP. Prior to 3.27.0, ArrayExpression does not guard dynamic mapping keys that are coerced to strings, allow…
• CVE-2026-48805NGHIÊM TRỌNG 9.1Twig is a template language for PHP. Prior to 3.27.0, deprecated internal wrappers in src/Resources/core.php do not forward the current sand…