Smarty, a PHP template engine, improperly limits pathname access in its stream: resource-name handling from versions 5.0.0 to before 5.8.4. This allows use of php://filter-wrapped resource names to read contents of arbitrary local files accessible to the PHP process. An attacker able to author or influence template resource references can exploit this to disclose sensitive file contents outside the intended template or configuration scope. The vulnerability is identified as CWE-22 (Path Traversal) and is resolved in Smarty version 5.8.4.

An attacker with the ability to create or influence template resource references can read arbitrary local files accessible to the PHP process, potentially exposing sensitive information. This could lead to information disclosure beyond the intended template or configuration files. The vulnerability requires high privileges to exploit (PR:H) and does not require user interaction or authentication beyond that.

Upgrade Smarty to version 5.8.4 or later, where this path traversal vulnerability has been fixed. No other official remediation or temporary fixes are indicated. Patch status is not explicitly stated but the fix is confirmed in version 5.8.4.