| Package | Affected versions | Patched versions |
|---|---|---|
| smarty/smarty | < 3.1.33 | 3.1.33 |
| smarty | ≥ 3.0.0, ≤ 3.1.32 |
Smarty before 3.1.33-dev-4 allows attackers to bypass the trusted_dir protection mechanism via a file:./../ substring in an include statement.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free