Lucene search
OpenJS FoundationFRIENDSOFPHP:SMARTY:SMARTY:CVE-2022-29221HistoryMay 17, 2022 - 12:59 p.m.
PHP Code Injection by malicious block or filename
2022-05-1712:59:00
OpenJS Foundation
github.com
5
Description Impact Template authors could inject php code by choosing a malicous {block} name or {include} file name. Sites that cannot fully trust template authors should update asap. Patches Please upgrade to the most recent version of Smarty v3 or v4. Workarounds Is there a way for users to fix or remediate the vulnerability without upgrading? References Are there any links users can visit to find out more? For more information If you have any questions or comments about this advisory: Open an issue in the Smarty repo
| CPE | Name | Operator | Version |
|---|---|---|---|
| smarty/smarty | lt | 4.1.1 |
Related
nessus
nessus
Ubuntu 22.04 LTS : Smarty vulnerability (USN-6012-1)
2023-04-13 00:00:00
Debian DLA-3033-1 : smarty3 - LTS security update
2022-05-31 00:00:00
osv
osv
smarty3 - security update
2022-05-29 00:00:00
PHP Code Injection by malicious block or filename in Smarty
2022-05-25 20:15:02
smarty3 vulnerability
2023-04-13 07:16:07
cvelist
cvelist
CVE-2022-29221 PHP Code Injection by malicious block or filename in Smarty
2022-05-24 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3033-1)
2022-06-01 00:00:00
Ubuntu: Security Advisory (USN-6012-1)
2023-04-13 00:00:00
Mageia: Security Advisory (MGASA-2022-0226)
2022-06-14 00:00:00
github
github
PHP Code Injection by malicious block or filename in Smarty
2022-05-25 20:15:02
prion
prion
Code injection
2022-05-24 15:15:00
debian
debian
[SECURITY] [DLA 3033-1] smarty3 security update
2022-05-29 15:01:41
[SECURITY] [DSA 5151-1] smarty3 security update
2022-05-29 15:15:10
ubuntu
ubuntu
Smarty vulnerability
2023-04-13 00:00:00
PostfixAdmin vulnerabilities
2023-12-12 00:00:00
debiancve
debiancve
CVE-2022-29221
2022-05-24 15:15:00
mageia
mageia
Updated php-smarty packages fix security vulnerability
2022-06-13 23:44:20
veracode
veracode
Arbitrary Code Injection
2022-05-25 05:09:41
ubuntucve
ubuntucve
CVE-2022-29221
2022-05-24 00:00:00
githubexploit
githubexploit
Exploit for Code Injection in Smarty
2022-05-25 06:02:23
cve
cve
CVE-2022-29221
2022-05-24 15:15:00
fedora
fedora
[SECURITY] Fedora 37 Update: php-Smarty-3.1.47-1.fc37
2022-11-10 22:46:12
[SECURITY] Fedora 36 Update: php-Smarty-3.1.47-1.fc36
2022-10-23 09:04:31
gentoo
gentoo
Smarty: Multiple vulnerabilities
2022-09-25 00:00:00
6.8 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.4%
Related for FRIENDSOFPHP:SMARTY:SMARTY:CVE-2022-29221