CVE Vulnerability

CVE-2021-29454

Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.42 and 4.0.2, template authors could run arbitrary PHP code by crafting a malicious math string. If a math string was passed through as user provided data to the math function, external users could run arbitrary PHP code by crafting a malicious math string. Users should upgrade to version 3.1.42 or 4.0.2 to receive a patch.

6.5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

8.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/smarty-php/smarty/commit/215d81a9fa3cd63d82fb3ab56ecaf97cf1e7db71 Patch Third Party Advisory
https://github.com/smarty-php/smarty/security/advisories/GHSA-29gp-2c3m-3j6m Third Party Advisory
https://packagist.org/packages/smarty/smarty Product Third Party Advisory
https://github.com/smarty-php/smarty/releases/tag/v3.1.42 Release Notes Third Party Advisory
https://www.smarty.net/docs/en/language.function.math.tpl Vendor Advisory
https://github.com/smarty-php/smarty/releases/tag/v4.0.2 Release Notes Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/05/msg00005.html Mailing List Third Party Advisory
https://www.debian.org/security/2022/dsa-5151 Third Party Advisory
https://security.gentoo.org/glsa/202209-09 Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L777JIBIWJV34HS7LXPIDWASG7TT4LNI/ Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BRAJVDRGCIY5UZ2PQHKDTT7RMKG6WJQQ/ Mailing List Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:smarty:smarty:*:*:*:*:*:*:*:*
cpe:2.3:a:smarty:smarty:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
Information

Published : 2022-01-10 08:15

Updated : 2022-12-08 10:22

NVD link : CVE-2021-29454

Mitre link : CVE-2021-29454

Products Affected
No products.
CWE
CWE-74