CyberRota Analysis
AI-GeneratedTwig versions prior to 3.27.0 are vulnerable due to a flaw in the handling of per-template filter, tag, and function allow-lists, which can lead to cached templates being reused across different sandbox states. This could allow an attacker to execute unauthorized code in a sandboxed environment, posing a significant security risk. Developers and organizations using Twig for PHP templating should prioritize updating to version 3.27.0 to mitigate this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list verdict is computed when a Template instance is constructed and can remain cached after sandbox state changes between renders, allowing a later sandboxed render to reuse a template that was originally checked with a different or empty policy. This issue is fixed in version 3.27.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)