Tribalsystems vulnerabilities
We track 2 vulnerabilities in Tribalsystems products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 4, 2024.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest Tribalsystems vulnerabilities
- 9.8 Critical severity
zenario: Improper Control of Generation of Code
Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator.
- 7.2 High severity
Zenario CMS: Unrestricted Upload of File with Dangerous Type
Zenario CMS 9.2 allows an authenticated admin user to bypass the file upload restriction by creating a new 'File/MIME Types' using the '.phar' extension. Then an attacker can upload a malicious file, intercept the request and change the extension to '.phar' in