CVE-2024-45411

Twig is a template language for PHP. Under some circumstances, the sandbox security checks are not run which allows user-contributed templates to bypass the sandbox restrictions. This vulnerability is fixed in 1.44.8, 2.16.1, and 3.14.0.

CVSS v3 8.5 HIGH

8.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/twigphp/Twig/commit/11f68e2aeb526bfaf638e30d4420d8a710f3f7c6	Patch
https://github.com/twigphp/Twig/commit/2102dd135986db79192d26fb5f5817a566e0a7de	Patch
https://github.com/twigphp/Twig/commit/7afa198603de49d147e90d18062e7b9addcf5233	Patch
https://github.com/twigphp/Twig/security/advisories/GHSA-6j75-5wfj-gh66	Vendor Advisory
https://lists.debian.org/debian-lts-announce/2024/09/msg00031.html

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:symfony:twig::::::::
	cpe:2.3:a:symfony:twig::::::::
	cpe:2.3:a:symfony:twig::::::::

History

No history.

Information

Published : 2024-09-09 19:15

Updated : 2024-11-21 09:37

NVD link : CVE-2024-45411

Mitre link : CVE-2024-45411

CVE.ORG link : CVE-2024-45411

JSON object : View

Products Affected

symfony

twig

CWE

CWE-693

Protection Mechanism Failure

NVD-CWE-Other

{"id": "CVE-2024-45411", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 3.9}]}, "published": "2024-09-09T19:15:13.543", "references": [{"url": "https://github.com/twigphp/Twig/commit/11f68e2aeb526bfaf638e30d4420d8a710f3f7c6", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/twigphp/Twig/commit/2102dd135986db79192d26fb5f5817a566e0a7de", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/twigphp/Twig/commit/7afa198603de49d147e90d18062e7b9addcf5233", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/twigphp/Twig/security/advisories/GHSA-6j75-5wfj-gh66", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00031.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-693"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Twig is a template language for PHP. Under some circumstances, the sandbox security checks are not run which allows user-contributed templates to bypass the sandbox restrictions. This vulnerability is fixed in 1.44.8, 2.16.1, and 3.14.0."}, {"lang": "es", "value": "Twig es un lenguaje de plantillas para PHP. En determinadas circunstancias, las comprobaciones de seguridad de la zona protegida no se ejecutan, lo que permite que las plantillas aportadas por los usuarios eludan las restricciones de la zona protegida. Esta vulnerabilidad se ha corregido en las versiones 1.44.8, 2.16.1 y 3.14.0."}], "lastModified": "2024-11-21T09:37:44.680", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:symfony:twig:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3192AE01-3EFB-44E5-B53A-B780CBF92C2D", "versionEndExcluding": "1.44.8", "versionStartIncluding": "1.0.0"}, {"criteria": "cpe:2.3:a:symfony:twig:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CFE4954-BCFB-4281-9D99-7F406BDBD036", "versionEndExcluding": "2.16.1", "versionStartIncluding": "2.0.0"}, {"criteria": "cpe:2.3:a:symfony:twig:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "510D8962-28E1-41FD-A322-63FCA077A887", "versionEndExcluding": "3.14.0", "versionStartIncluding": "3.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}