A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call the __toString() method on an object even if not allowed by the security policy in place.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some
    circumstances, it is possible to call the __toString() method on an object even if not allowed by the
    security policy in place. (CVE-2019-9942)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5947-1 advisory.

    Fabien Potencier discovered that Twig was not properly enforcing sandbox policies when dealing with     objects automatically cast to strings by PHP. An attacker could possibly use this issue to expose     sensitive information. This issue was only fixed in Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2019-9942)

    Marlon Starkloff discovered that Twig was not properly enforcing closure constraints in some of its array     filtering functions. An attacker could possibly use this issue to execute arbitrary code. This issue was     only fixed in Ubuntu 20.04 ESM. (CVE-2022-23614)

    Dariusz Tytko discovered that Twig was not properly verifying input data utilized when defining pathnames     used to access files in a system. An attacker could possibly use this issue to access unauthorized     resources and expose sensitive information. (CVE-2022-39261)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Fabien Potencier discovered that twig, a template engine for PHP, did not correctly enforce sandboxing. This could result in potential information disclosure.

ID	Name	Product	Family	Severity
419614	SCA: security update for twig/twig (GHSA-vxrc-68xx-x48g)	Tenable Cloud Security	SCA Checks	low
419614	SCA: security update for twig/twig (GHSA-vxrc-68xx-x48g)	Tenable Self-Hosted Container Security	SCA Checks	low
172497	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : Twig vulnerabilities (USN-5947-1)	Nessus	Ubuntu Local Security Checks	critical
123531	Debian DSA-4419-1 : twig - security update	Nessus	Debian Local Security Checks	low

Detections

Analytics

CVE-2019-9942

low

Tenable Plugins

low

low

critical

low