CVE-2024-45411Élevée · CVSS 8.6EPSS 0,85%Correctif disponibleTwig has a possible sandbox bypassTwig is a template language for PHP. Under some circumstances, the sandbox security checks are not run which allows user-contributed templates to bypass the sandbox restrictions. This vulnerability is fixed in 1.44.8, 2.16.1, and 3.14.0.php-twigSystèmes d’exploitationMettez à jour vers 3.8.0-2ubuntu1Publication 9 septembre 2024Mise à jour 16 septembre 2024Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗