Most recent entries from all

bdu:2022-02129

EUVD-2026-234531

fkie_cve-2021-29454

Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.42 and 4.0.2, template authors could run arbitrary PHP code by crafting a malicious math string. If a math string was passed through as user provided data to the math function, external users could run arbitrary PHP code by crafting a malicious math string. Users should upgrade to version 3.1.42 or 4.0.2 to receive a patch.

GHSA-29gp-2c3m-3j6m — Sandbox Escape by math function in smarty

Affected: Packagist: smarty/smarty

### Impact Template authors could run arbitrary PHP code by crafting a malicious math string. If a math string is passed through as user provided data to the math function, external users could run arbitrary PHP code by crafting a malicious math string.

### Patches Please upgrade to 4.0.2 or 3.1.42 or higher.

### References See [documentation on Math function](https://www.smarty.net/docs/en/language.function.math.tpl).

### For more information If you have any questions or comments about this advisory please open an issue in [the Smarty repo](https://github.com/smarty-php/smarty)

gsd-2021-29454

UBUNTU-CVE-2021-29454

Affected: Ubuntu:Pro:16.04:LTS: smarty3, Ubuntu:18.04:LTS: smarty3, Ubuntu:Pro:20.04:LTS: smarty3, Ubuntu:22.04:LTS: smarty3