GHSA-4rmg-292m-wg3w
Suggest an improvement- Source
- https://github.com/advisories/GHSA-4rmg-292m-wg3w
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-4rmg-292m-wg3w/GHSA-4rmg-292m-wg3w.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-4rmg-292m-wg3w
- Aliases
- Published
- 2024-05-29T18:44:30Z
- Modified
- 2024-05-29T19:11:54.140945Z
- Severity
-
- 7.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N CVSS Calculator
- Summary
- Smarty vulnerable to PHP Code Injection by malicious attribute in extends-tag
- Details
-
Impact
Template authors could inject php code by choosing a malicous file name for an extends-tag. Users that cannot fully trust template authors should update asap.
Patches
Please upgrade to the most recent version of Smarty v4 or v5. There is no patch for v3.
- References
Affected packages
Packagist / smarty/smarty
Package
- Name
- smarty/smarty
- Purl
- pkg:composer/smarty/smarty
Packagist / smarty/smarty
Package
- Name
- smarty/smarty
- Purl
- pkg:composer/smarty/smarty
Affected versions
v3.*
v3.1.11
v3.1.12
v3.1.13
v3.1.14
v3.1.15
v3.1.16
v3.1.17
v3.1.18
v3.1.19
v3.1.20
v3.1.21
v3.1.23
v3.1.24
v3.1.25
v3.1.26
v3.1.27
v3.1.28
v3.1.29
v3.1.30
v3.1.31
v3.1.32
v3.1.33
v3.1.34
v3.1.35
v3.1.36
v3.1.37
v3.1.37.1
v3.1.38
v3.1.39
v3.1.40
v3.1.41
v3.1.42
v3.1.43
v3.1.44
v3.1.45
v3.1.46
v3.1.47
v3.1.48
v4.*
v4.0.0-rc.0
v4.0.0
v4.0.1
v4.0.2
v4.0.3
v4.0.4
v4.1.0
v4.1.1
v4.2.0
v4.2.1
v4.3.0
v4.3.1
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.4.0
v4.4.1
v4.5.0
v4.5.1
v4.5.2