Lucene search

K
cvelistMitreCVELIST:CVE-2019-9942
HistoryMar 23, 2019 - 2:31 p.m.

CVE-2019-9942

2019-03-2314:31:53
mitre
www.cve.org
6

AI Score

4.1

Confidence

High

EPSS

0.002

Percentile

65.2%

A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call the __toString() method on an object even if not allowed by the security policy in place.

AI Score

4.1

Confidence

High

EPSS

0.002

Percentile

65.2%