CVE-2018-13982

SmartySecurity::isTrustedResourceDir in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files...

CVE-2018-13982: Improper Limitation of a Pathname to a Restricted Directory

SmartySecurity::isTrustedResourceDir in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files...

PT-2018-3780

Name of the Vulnerable Software and Affected Versions Smarty versions prior to 3.1.33 Description The issue is related to a path traversal vulnerability due to insufficient template code sanitization in the Smarty Security::isTrustedResourceDir method. This allows attackers controlling the execut...