Lucene search

K
osvGoogleOSV:CVE-2017-1000480
HistoryJan 03, 2018 - 6:29 p.m.

CVE-2017-1000480

2018-01-0318:29:00
Google
osv.dev
13

AI Score

9.9

Confidence

High

EPSS

0.004

Percentile

73.9%

Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch() or display() functions on custom resources that does not sanitize template name.

AI Score

9.9

Confidence

High

EPSS

0.004

Percentile

73.9%