Access Control: Twig PHP \<2.4.4 template engine - SSTI¶

Identifier: twig_php_ssti

Scanner(s) Support¶

Description¶

A vulnerability in Twig PHP allows remote attackers to cause the product to execute arbitrary commands via an SSTI vulnerability.

Configuration¶

Example¶

Example configuration:

---
security_tests:
  twig_php_ssti:
    skip: false

Reference¶

skip¶

Type : boolean

Skip the test if true.