CVE-2021-43676

CVE-2021-43676 affects matyhtf framework v3.0.5 via a path manipulation vulnerability in Smarty.class.php (path traversal). The issue is fixed in v3.0.6; public advisories note potential access to files outside the intended directory via _read_file in Smarty.class.php.