Threats tagged 'ghsa-4rmg-292m-wg3w'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.3	CVE-2024-35226smarty/smarty · Smarty vulnerable to PHP Code Injection by malicious attribute in extends-tag High7.32024-05-29GCVE DatabaseCVE-2024-35226 Smarty versions 3.0.0 through before 4.5.3 and 5.0.0 through before 5.1.1 are vulnerable to PHP code injection via a malicious file name in the extends-tag. This allows template authors to inject PHP code, posing a high risk especially when template authors are not fully trusted. The vulnerability is fixed in Smarty versions 4.5.3 and 5.1.1. Report on CVE-2024-35226 Vulnerability CWE-94 #ghsa-4rmg-292m-wg3w #packagist	GCVE Database	2024-05-29

Page 1 of 1