| Package | Affected versions | Patched versions |
|---|---|---|
| smarty | = 1.0= 1.0a= 1.0b= 1.1.0= 1.2.0= 1.2.1= 1.2.2= 1.3.0= 1.3.1= 1.3.2= 1.4.0= 1.4.1= 1.4.2= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.5.0= 1.5.1= 1.5.2= 2.0.0= 2.0.1= 2.1.0= 2.1.1= 2.2.0= 2.3.0= 2.3.1= 2.4.0= 2.4.1= 2.4.2= 2.5.0= 2.6.0= 2.6.1= 2.6.10= 2.6.11= 2.6.12= 2.6.13= 2.6.14= 2.6.15= 2.6.16= 2.6.17= 2.6.18= 2.6.2= 2.6.20= 2.6.22= 2.6.24= 2.6.25= 2.6.26= 2.6.3= 2.6.4= 2.6.5= 2.6.6= 2.6.7= 2.6.9= 3.0.0≤ 3.0.0 |
Smarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2) private object members of an assigned object, which has unspecified impact and remote attack vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free