Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXc1aHItam00ai05anZx

Sandbox escape through template_object in smarty

Sandbox protection could be bypassed through access to an internal Smarty object that should have been blocked. Sites that rely on Smarty Security features should upgrade as soon as possible. Please upgrade to 3.1.39 or higher.

Permalink: https://github.com/advisories/GHSA-w5hr-jm4j-9jvq
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXc1aHItam00ai05anZx
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: about 3 years ago
Updated: 3 months ago

CVSS Score: 7.5
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Identifiers: GHSA-w5hr-jm4j-9jvq, CVE-2021-26119
References:

• https://github.com/smarty-php/smarty/security/advisories/GHSA-w5hr-jm4j-9jvq
• https://nvd.nist.gov/vuln/detail/CVE-2021-26119
• https://github.com/smarty-php/smarty/blob/master/CHANGELOG.md
• https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html
• https://lists.debian.org/debian-lts-announce/2021/04/msg00014.html
• https://security.gentoo.org/glsa/202105-06
• https://srcincite.io/blog/2021/02/18/smarty-template-engine-multiple-sandbox-escape-vulnerabilities.html
• https://www.debian.org/security/2022/dsa-5151
• https://github.com/FriendsOfPHP/security-advisories/blob/master/smarty/smarty/CVE-2021-26119.yaml
• https://github.com/advisories/GHSA-w5hr-jm4j-9jvq

Repository: https://github.com/smarty-php/smarty
Blast Radius: 25.3

Affected Packages