Login Request a demo
SM
Product
Smarty
by Smarty · last CVE Sep 29, 2023
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities31In the news0Timeline
Severity mix
Critical 4High 5Medium 4Low 0
Severity
All severities31Critical4High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Smarty to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-29221
8.8
5%
May 24
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic
Affected: before 3.1.45; 4.0.0 before 4.1.1
CVE-2021-29454
8.8
2%
Jan 10
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic
Affected: before 3.1.42; 4.0.0 before 4.0.2
CVE-2021-21408
8.8
2%
Jan 10
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic
Affected: before 3.1.43; 4.0.0 before 4.0.3
CVE-2021-26119
7.5
8%
Feb 22
Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode
Affected: before 3.1.39
CVE-2018-13982
7.5
3%
Sep 18
Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitization
Affected: before 3.1.33
Showing 5