Lucene search
K

EUVD-2022-0423

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 2 Views

Smarty template engine allows arbitrary PHP code execution via malicious math strings before updates.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2021-29454
10 Jan 202222:14
circl
CNNVD
Smarty 注入漏洞
10 Jan 202200:00
cnnvd
CVE
CVE-2021-29454
10 Jan 202200:00
cve
Cvelist
CVE-2021-29454 Sandbox Escape by math function in smarty
10 Jan 202200:00
cvelist
Debian
[SECURITY] [DLA 2995-1] smarty3 security update
5 May 202220:07
debian
Debian
[SECURITY] [DSA 5151-1] smarty3 security update
29 May 202214:57
debian
Debian CVE
CVE-2021-29454
10 Jan 202200:00
debiancve
Tenable Nessus
Debian DLA-2995-1 : smarty3 - LTS security update
6 May 202200:00
nessus
Tenable Nessus
Debian DSA-5151-1 : smarty3 - security update
31 May 202200:00
nessus
Tenable Nessus
Fedora 36 : php-Smarty (2022-52154efd61)
22 Dec 202200:00
nessus
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "facf8b64-c8f8-38c6-a9bf-bb784c2dd1b2",
        "vendor": {
          "name": "smarty-php"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "7a85b70a-8aaf-3a2e-9355-3606980003dc",
        "product": {
          "name": "smarty"
        },
        "product_version": "< 3.1.42"
      },
      {
        "id": "9a914f8e-3da8-34ac-ad6f-47c2baa9a3c8",
        "product": {
          "name": "smarty"
        },
        "product_version": "4.0.0, < 4.0.2"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
6.2Medium risk
Vulners AI Score6.2
CVSS 3.18.1 - 8.8
CVSS 26.5
EPSS0.00643
SSVC
2