Lucene search
Veracode Vulnerability DatabaseVERACODE:7014HistoryJul 11, 2018 - 5:24 a.m.
Server-Side Template Injection (SSTI)
2018-07-1105:24:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
EPSS
0.06
Percentile
93.5%
twig/twig is vulnerable to server-side template injection (SSTI) attacks. The vulnerabiltiy exists due to the way twig/twig interprets the value of the token in the templates, allowing commands to be executed depending on the vulnerable application.
Related
cve
cve
CVE-2018-13818
2018-07-10 14:29:00
debiancve
debiancve
CVE-2018-13818
2018-07-10 14:29:00
cvelist
cvelist
CVE-2018-13818
2018-07-10 14:00:00
ubuntucve
ubuntucve
CVE-2018-13818
2018-07-10 00:00:00
prion
prion
Input validation
2018-07-10 14:29:00
nvd
nvd
CVE-2018-13818
2018-07-10 14:29:00