Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7503
HistorySep 19, 2018 - 5:22 a.m.

Directory Traversal

2018-09-1905:22:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

EPSS

0.003

Percentile

69.8%

smarty is vulnerable to a directory traversal attack. The library does not properly sanitize filepaths in the templates, allowing a malicious user to traverse the directory by executing the code on the templates.