Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | smarty3 | 3.1.31+20161214.1.c7d42e4+selfpack1-2+deb9u2 |
Vulnerabilities 4
-
Critical 9.8CVE-2021-26120 EPSS 82%
PHP Code Injection by malicious function name in smarty
Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring.
-
High 7.5
Smarty Path Traversal Vulnerability
Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security re…
-
High 7.5
Sandbox escape through template_object in smarty
Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode.
-
Medium 5.9
Smarty Path Traversal Vulnerability
Smarty before 3.1.33-dev-4 allows attackers to bypass the trusted_dir protection mechanism via a file:./../ substring in an include statement.