CyberRota Analysis
AI-GeneratedTwig versions prior to 3.26.0 are vulnerable to a security issue where certain language constructs can trigger PHP string coercion on Stringable operands, enabling sandboxed template authors to invoke the __toString() method on objects within the render context. This could lead to unauthorized access to sensitive data or unintended behavior in applications using Twig for templating. Developers and organizations utilizing Twig in their PHP applications should prioritize upgrading to version 3.26.0 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Twig is a template language for PHP. Prior to 3.26.0, several Twig language constructs trigger PHP string coercion on a Stringable operand without consulting SecurityPolicy::checkMethodAllowed(), allowing a sandboxed template author to invoke __toString() on objects reachable in the render context through conditional expressions, comparison operators, tests, template-loading tags, dynamic attribute names, spread arguments, the do tag, and the .. range operator. This issue is fixed in version 3.26.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)