Fabien Potencier

**اسم البرنامج المعرض للخطر والإصدارات المتأثرة** إصدارات Twig 2.16.x إصدارات Twig من 3.9.0 حتى 3.25.x **الوصف** يوجد ثغرة في تجاوز بيئة الحماية (sandbox) عند استخدام `SourcePolicyInterface`. يحدث هذا بسبب فشل فحص وقت التشغيل في استخدام مصدر القالب الحالي، مما يسمح للمهاجمين الذين يمتلكون قدرات عرض القوالب بتمرير دالات PHP قابلة للتنفيذ تعسفية إلى مرشحات `sort` و`filter` و`map` و`reduce`. قد يؤدي هذا إلى تنفيذ تعليمات برمجية تعسفية عندما يتم تمكين بيئة الحماية عبر سياسة المصدر بدلاً من تمكينها بشكل عام. **التوصيات** قم بتحديث إصدارات Twig من 2.16.x إلى إصدار أحدث يحتوي على الإصلاح. قم بتحديث إصدارات Twig من 3.9.0 إلى 3.25.x إلى إصدار أحدث يحتوي على الإصلاح.

**Name of the Vulnerable Software and Affected Versions** Twig versions 1.x prior to 1.44.7 Twig versions 2.x prior to 2.15.3 Twig versions 3.x prior to 3.4.3 **Description** The issue arises when the filesystem loader loads templates for which the name is a user input. It is possible to use the `source` or `include` statement to read arbitrary files from outside the templates' directory when using a namespace like `@somewhere/../some.file`. In such a case, validation is bypassed. **Recommendations** For versions 1.x prior to 1.44.7, update to version 1.44.7 or later. For versions 2.x prior to 2.15.3, update to version 2.15.3 or later. For versions 3.x prior to 3.4.3, update to version 3.4.3 or later. As a temporary workaround, consider restricting the use of the `source` and `include` statements with user-input template names until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Twig versions prior to 1.38.0 Twig versions 2.x prior to 2.7.0 **Description** A sandbox information disclosure issue exists because, under some circumstances, it is possible to call the ` toString()` method on an object even if not allowed by the security policy in place. This could allow a remote attacker to access confidential data. **Recommendations** For Twig versions prior to 1.38.0, update to version 1.38.0 or later. For Twig versions 2.x prior to 2.7.0, update to version 2.7.0 or later. As a temporary workaround, consider restricting access to objects that could be exploited through the ` toString()` method until a patch is available.

**Name of the Vulnerable Software and Affected Versions** FOSUserBundle versions prior to 1.3.3 **Description** The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by submitting a long password to the login form. This triggers an expensive hash computation, such as a PBKDF2 computation. **Recommendations** For versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue. As a temporary workaround, consider restricting the maximum password length to prevent excessive CPU consumption.