~ / search / GHSA-hr2r-w6wc-25pv

GHSA-hr2r-w6wc-25pv

Zenario uses Twig filters insecurely in the Twig Snippet plugin

Source: GitHub Advisory Database (reviewed) Critical CVE-2024-34461

Packages

EcosystemPackageAffectedFixed in
Packagist tribalsystems/zenario < 9.5.60437 9.5.60437

Details

As written in the advisory (Markdown source, shown as plain text).

Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator.

References

External links from the advisory. They lead to third-party sites.