Lucene search

K
ubuntucveUbuntu.comUB:CVE-2017-1000480
HistoryJan 03, 2018 - 12:00 a.m.

CVE-2017-1000480

2018-01-0300:00:00
ubuntu.com
ubuntu.com
9

0.004 Low

EPSS

Percentile

73.8%

Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling
fetch() or display() functions on custom resources that does not sanitize
template name.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchsmarty3< 3.1.31+20161214.1.c7d42e4+selfpack1-3UNKNOWN
ubuntu16.04noarchsmarty3< anyUNKNOWN

0.004 Low

EPSS

Percentile

73.8%