PT-2024-40156 · Twig · Twig

Published 2024-05-30 · Updated 2024-05-30

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Twig (affected versions not specified)

Description: The issue allows for path traversal when Twig is used with Twig Loader Filesystem for loading templates and the application uses non-trusted template names. This enables an attacker to access files in a parent directory of the configured path by prepending /../ to the path in an include statement, such as {% include "/../somefile in path to" %}. Other variations like ../somefile, /../../somefile, or ../../somefile will not work and will result in an exception.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

GHSA-7CVR-XHM5-X998

Affected Products

Twig

References · 5

• https://osv.dev/vulnerability/GHSA-7cvr-xhm5-x998 · Vendor Advisory
• https://github.com/twigphp/Twig · Note
• https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/2013-04-08.yaml · Note
• https://github.com/fabpot/Twig/commit/3d19a2eed53570776af313593aaeb5ad62cf4980.diff · Note
• https://web.archive.org/web/20130511111630/http://blog.twig.sensiolabs.org/post/47461911874/security-release-twig-1-12-3-released · Note