Vulners
Lucene search
2 matches found
CVE-2018-16831
Smarty before 3.1.33-dev-4 allows attackers to bypass the trusteddir protection mechanism via a file:./../ substring in an include statement...
7.1CVSS6.2AI score0.00359EPSS
Exploits1References1
Design/Logic Flaw
Smarty before 3.1.33-dev-4 allows attackers to bypass the trusteddir protection mechanism via a file:./../ substring in an include statement...
7.1CVSS6.3AI score0.00359EPSS
Exploits1References1Affected Software1
20