Summary
Takuya Aramaki discovered that Smarty did not properly escape JavaScript
code. An attacker could possibly use this issue to conduct a cross-site
scripting attack.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | smarty3 | 3.1.21-1ubuntu1+esm2 |
References
-
report
https://ubuntu.com/security/CVE-2023-28447