tocsin

Debian/smarty3: high 7.5

Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode.

Action: Upgrade smarty3 to 3.1.39-1 or later.

Affected

introducedfixedlast affected
03.1.39-1-

Fixed versions

3.1.39-1

Sources

published · modified · JSON