CyberRota Analysis
AI-GeneratedThe vulnerability affects the Twig template engine for PHP, specifically versions prior to 3.26.0, where the column filter improperly exposes object properties to untrusted template authors. This flaw allows unauthorized access to properties not included in the sandbox allowlist, potentially leading to information disclosure. Developers using Twig in environments where untrusted templates are processed should prioritize upgrading to version 3.26.0 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Twig is a template language for PHP. Prior to 3.26.0, the column filter passes object arrays to PHP array_column(), which reads public and magic properties without reaching CoreExtension::getAttribute() or SandboxExtension::checkPropertyAllowed(), allowing an untrusted template author with column in allowedFilters to read properties that are not in the sandbox allowlist. This issue is fixed in version 3.26.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)