~ / search / GHSA-5mv2-rx3q-4w2v

GHSA-5mv2-rx3q-4w2v

Code injection in Twig

Source: GitHub Advisory Database (reviewed) High CVE-2022-23614

Packages

EcosystemPackageAffectedFixed in
Packagist twig/twig >= 2.0.0, < 2.14.11 2.14.11
Packagist twig/twig >= 3.0.0, < 3.3.8 3.3.8

Details

As written in the advisory (Markdown source, shown as plain text).

# Description When in a sandbox mode, the `arrow` parameter of the `sort` filter must be a closure to avoid attackers being able to run arbitrary PHP functions. # Resolution We now disallow calling non Closure in the `sort` filter like we already did for some other filters. # Credits We would like to thank Marlon Starkloff for reporting the issue and Fabien Potencier for fixing the issue.

References

External links from the advisory. They lead to third-party sites.