CVE-2024-42355 | Shopware up to 6.5.8.12/6.6.5.0 Twig Tag sw_silent_feature_call special elements used in a template engine (GHSA-27wp-jvhw-v4xp)

A vulnerability has been found in Shopware up to 6.5.8.12/6.6.5.0 and classified as critical. Affected by this vulnerability is the function sw_silent_feature_call of the component Twig Tag Handler. The manipulation leads to improper neutralization of special elements used in a template engine.

This vulnerability is known as CVE-2024-42355. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.