Unscored severity · published Nov 6, 2015
CVE-2015-7809
The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the _self variable in…
–
CVSS
3.4%
EPSS
No
On KEV
Description
The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the _self variable in a template.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TW
Twig · Symfony
through 1.19.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-7809
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-7809
openwall.com
http://openwall.com/lists/oss-security/2015/08/21/3
openwall.com
http://openwall.com/lists/oss-security/2015/10/11/2
Vendor Advisory
http://symfony.com/blog/security-release-twig-1-20-0
www.debian.org
http://www.debian.org/security/2015/dsa-3343
github.com
https://github.com/fabpot/Twig/commit/30be07759a3de2558da5224f127d052ecf492e8f
github.com
https://github.com/twigphp/Twig/pull/1759
More from Twig
9.9
CVE-2026-24425
Twig 2.16.x & 3.9.0-3.25.x Sandbox Bypass via SourcePolicyInterface
9.8
CVE-2026-46634
Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template name
9.8
CVE-2026-46633
Twig: PHP code injection via `{% use %}` template name
9.8
CVE-2022-23614
Twig is an open source template language for PHP
9.8
CVE-2018-13818
Twig before 2.4.4 allows Server-Side Template Injection (SSTI) via the search search_key parameter