ubuntu · CVE-2015-7809

Quick triage

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2015-7809 medium priority: Ubuntu including 1 source packages (twig), 5 status rows across 5 suites (precise, trusty, upstream, vivid, wily): DNE 2, released 2, not-affected 1.

Description:

The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the _self variable in a template.