NVD

Id
28253  
Name
CVE-2015-7809  
Description
The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the _self variable in a template.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-11-06  
Modified Date
2015-11-09  
Seq
2015-7809  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
148528 28253 CVE-2015-7809 [oss-security] 20150821 CVE Request: twig remote code execution  View
148529 28253 CVE-2015-7809 [oss-security] 20151011 Re: CVE Request: twig remote code execution  View
148530 28253 CVE-2015-7809 http://symfony.com/blog/security-release-twig-1-20-0  View
148531 28253 CVE-2015-7809 DSA-3343  View
148532 28253 CVE-2015-7809 https://github.com/fabpot/Twig/commit/30be07759a3de2558da5224f127d052ecf492e8f  View
148533 28253 CVE-2015-7809 https://github.com/twigphp/Twig/pull/1759  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10469 JVNDB-2015-005789 Sensio Labs Twig の Template.php の displayBlock 関数における任意のコードを実行される脆弱性 Sensio Labs Twig の Template.php の displayBlock 関数には、サンドボックスモードが有効になっている場合、任意のコードを実行される脆弱性が存在します。 CVE-2015-7809 85034 CVE-2015-7809 28253 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005789.html 2015-08-12 2015-11-10 View