| Package | Affected versions | Patched versions |
|---|---|---|
| smarty/smarty | < 3.0.0-beta4 | 3.0.0-beta4 |
| smarty | = 1.0= 1.0a= 1.0b= 1.1.0= 1.2.0= 1.2.1= 1.2.2= 1.3.0= 1.3.1= 1.3.2= 1.4.0= 1.4.1= 1.4.2= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.5.0= 1.5.1= 1.5.2= 2.0.0= 2.0.1= 2.1.0= 2.1.1= 2.2.0= 2.3.0= 2.3.1= 2.4.0= 2.4.1= 2.4.2= 2.5.0= 2.6.0= 2.6.1= 2.6.10= 2.6.11= 2.6.12= 2.6.13= 2.6.14= 2.6.15= 2.6.16= 2.6.17= 2.6.18= 2.6.2= 2.6.20= 2.6.22= 2.6.24= 2.6.25= 2.6.3= 2.6.4= 2.6.5= 2.6.6= 2.6.7= 2.6.9≤ 2.6.26 |
Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free