Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Twig before 2.4.4 allows Server-Side Template Injection (SSTI) via the search search_key parameter. NOTE: the vendor points out that Twig itself is not a web application and states that it is the responsibility of web applications using Twig to properly wrap input to it
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sensio Labs Twig 安全漏洞
Vulnerability Description
Sensio Labs Twig是法国Sensio Labs公司的一个PHP模板引擎，它允许开发人员自定义标签和过滤器，并创建DSL。 Sensio Labs Twig 2.4.4之前版本中存在安全漏洞。攻击者可借助‘search search_key’参数利用该漏洞执行命令。
CVSS Information
N/A
Vulnerability Type
N/A