24 lines
904 B
JSON
Raw Normal View History

{
"id": "CVE-2024-34461",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-05-04T05:15:06.600",
"lastModified": "2024-05-06T12:44:56.377",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator."
},
{
"lang": "es",
"value": "Zenario anterior a 9.5.60437 usa filtros Twig de forma insegura en el complemento Twig Snippet y en los elementos HEAD y BODY de todo el sitio, lo que permite la ejecuci\u00f3n de c\u00f3digo por parte de un dise\u00f1ador o administrador."
}
],
"metrics": {},
"references": [
{
"url": "https://zenar.io/zenario-9/blog/zenario-9560437-patch-released",
"source": "cve@mitre.org"
}
]
}