WRITEUP
WRITEUP
Exploit for CVE-2024-51755
- Twig <3.11.2, <3.14.1 - Info Disclosure
AI Analysis
This patch addresses a sandbox bypass vulnerability in Twig's attribute access logic, specifically for objects implementing ArrayAccess. The fix ensures sandbox checks are performed before isset() checks and restricts ArrayAccess behavior to prevent unauthorized property access.
Attack Type
auth_bypass
Complexity
moderate
Reliability
reliable
MITRE ATT&CK
Click anywhere or press Esc to close