smarty4 vulnerabilities (Debian)
9 vulnerabilities.
-
smarty4Debian Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cache 9.2 Critical -
smarty4Debian Smarty: SSRF via redirect bypass of trusted_uri using {fetch} 6.9 Medium -
smarty4Debian Smarty: Symlink path traversal out of trusted directories 6.9 Medium -
smarty4Debian PHP Code Injection by malicious attribute in extends-tag in Smarty 7.3 High -
smarty4Debian Cross site scripting vulnerability in Javascript escaping in smarty/smarty 7.1 High -
smarty4Debian Smarty Cross-site Scripting vulnerability in pages that use smarty_function_mailto 5.4 Medium -
smarty4Debian PHP Code Injection by malicious block or filename in Smarty 8.8 High -
smarty4Debian Sandbox Escape by math function in smarty 8.1 High -
smarty4Debian Access to restricted PHP code by dynamic static class access in smarty 8.8 High