Lucene search

K
cvelistMitreCVELIST:CVE-2018-13982
HistorySep 18, 2018 - 9:00 p.m.

CVE-2018-13982

2018-09-1821:00:00
mitre
www.cve.org
7

AI Score

8.5

Confidence

High

EPSS

0.003

Percentile

69.8%

Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files.

AI Score

8.5

Confidence

High

EPSS

0.003

Percentile

69.8%