Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-16831
7.1
HIGHCVSS v2
Published
September 11, 2018
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Smarty before 3.1.33-dev-4 allows attackers to bypass the trusted_dir protection mechanism via a file:./../ substring in an include statement.
smarty-php/smarty
GitHubSmarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic.
GitHubSmarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic.>= 3.0.0, <= 3.1.32NVD
Packagist