Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:20786
HistoryJul 12, 2019 - 6:36 a.m.

Information Disclosure

2019-07-1206:36:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

EPSS

0.002

Percentile

65.2%

twig/twig is vulnerable to information disclosure. The __toString() function can be called on an object under certain circumstances despite having a security policy in place to restrict access to the resource.