Lucene search
+L

3 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/13 12:0 a.m.10 views

The vulnerability of the implementation of the isTrustedResourceDir method in the Smarty_Security template handler for PHP Smarty allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the isTrustedResourceDir method in the SmartySecurity template handler class for PHP Smarty is related to errors in restricting access to directories with limited permissions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

7.8CVSS6.5AI score0.03463EPSS
SaveExploits1References14Affected Software3
OSV
OSV
added 2018/09/18 9:29 p.m.7 views

DEBIAN-CVE-2018-13982

SmartySecurity::isTrustedResourceDir in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files...

7.5CVSS7.1AI score0.03463EPSS
SaveExploits1References1
OSV
OSV
added 2018/09/18 9:29 p.m.7 views

UBUNTU-CVE-2018-13982

SmartySecurity::isTrustedResourceDir in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files...

7.5CVSS6.8AI score0.03463EPSS
SaveExploits1References5
Rows per page
Query Builder