Security Advisory
CVE-2015-7809
6.8
Vulnerability Description
The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the _self variable in a template.
Published Date
November 6, 2015
Official Source
NIST NVD Advisory