CVE-2015-7809

Packagist/twig/twig CVE-2015-7809: high 8.1, EPSS 3.40%

Twig remote code execution in templates

Action: Upgrade twig/twig to 1.20.0 or later.

composer require twig/twig:1.20.0

Affected

Fixed versions

Sources

• osv: GHSA-xw83-pwrm-9j74
• https://nvd.nist.gov/vuln/detail/CVE-2015-7809
• https://github.com/twigphp/Twig/pull/1759
• https://github.com/twigphp/Twig/commit/30be07759a3de2558da5224f127d052ecf492e8f
• https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/CVE-2015-7809.yaml
• https://github.com/twigphp/Twig
• https://symfony.com/blog/security-release-twig-1-20-0
• http://openwall.com/lists/oss-security/2015/08/21/3
• http://openwall.com/lists/oss-security/2015/10/11/2
• http://symfony.com/blog/security-release-twig-1-20-0
• http://www.debian.org/security/2015/dsa-3343

CVE-2015-7809 · published 2022-05-14T02:03:50Z · modified 2024-05-30T13:26:54.932820Z · JSON