critical9.8
CVE-2024-34461
Zenario uses Twig filters insecurely in the Twig Snippet plugin
Impact
Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | tribalsystems/zenario | < 9.5.60437 | 9.5.60437 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zenar | Zenario | before 9.5.60437 |
Versions were read from the advisory text. No structured product data has been published for this record yet.