Lucene search
GoogleOSV:GHSA-674V-3G2W-84GXHistoryMar 29, 2022 - 12:01 a.m.
Sandbox bypass in fenom
2022-03-2900:01:15
Google
osv.dev
8
0.002 Low
EPSS
Percentile
53.3%
In fenom 2.12.1 and before, there is a way in fenom/src/Fenom/Template.php function getTemplateCode()to bypass sandbox to execute arbitrary PHP code when disable_native_funcs is true.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fenom/fenom | eq | 2.0.0 | |
| fenom/fenom | eq | 2.11.6 | |
| fenom/fenom | eq | 2.7.0 | |
| fenom/fenom | eq | 2.11.8 | |
| fenom/fenom | eq | 2.2.0 | |
| fenom/fenom | eq | 2.6.0 | |
| fenom/fenom | eq | 1.4.9 | |
| fenom/fenom | eq | 2.1.0 | |
| fenom/fenom | eq | 2.9.0 | |
| fenom/fenom | eq | 2.4.6 |
Related
prion
prion
Spoofing
2022-03-28 11:15:00
osv
osv
CVE-2021-46433
2022-03-28 11:15:07
cvelist
cvelist
CVE-2021-46433
2022-03-28 10:51:16
cnvd
cnvd
fenom code injection vulnerability
2022-03-30 00:00:00
github
github
Sandbox bypass in fenom
2022-03-29 00:01:15
cve
cve
CVE-2021-46433
2022-03-28 11:15:07
nvd
nvd
CVE-2021-46433
2022-03-28 11:15:07