Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 8 | smarty3 | 3.1.21-1+deb8u1 |
| Debian · 9 | smarty3 | 3.1.31+20161214.1.c7d42e4+selfpack1-2+deb9u1 |
Vulnerabilities 1
-
Critical 9.8
Smarty PHP code injection
Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch() or display() functions on custom resources that does not sanitize template name.