GitHub Advisoryadvisory · Packagist
GHSA-w5hr-jm4j-9jvq Sandbox escape through template_object in smarty
HIGH
Official page ↗
- Aliases
- CVE-2021-26119
- Ecosystem
- Packagist
- Packages
- smarty/smarty
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Reviewed
- 2021-03-02
Affected packages
• Packagist smarty/smarty: < 3.1.39 → fixed in 3.1.39
Description
Sandbox protection could be bypassed through access to an internal Smarty object that should have been blocked. Sites that rely on Smarty Security features should upgrade as soon as possible. Please upgrade to 3.1.39 or higher.
Related
Alias · CVE (1)
- CVE-2021-26119 Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode. vulnerability
References
- https://github.com/smarty-php/smarty/security/advisories/GHSA-w5hr-jm4j-9jvq web
- https://nvd.nist.gov/vuln/detail/CVE-2021-26119 advisory
- https://github.com/FriendsOfPHP/security-advisories/blob/master/smarty/smarty/CVE-2021-26119.yaml web
- https://github.com/smarty-php/smarty web
- https://github.com/smarty-php/smarty/blob/master/CHANGELOG.md web
- https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html web
- https://lists.debian.org/debian-lts-announce/2021/04/msg00014.html web
- https://security.gentoo.org/glsa/202105-06 web
- https://srcincite.io/blog/2021/02/18/smarty-template-engine-multiple-sandbox-escape-vulnerabilities.html web
- https://www.debian.org/security/2022/dsa-5151 web