{"action":"Upgrade smarty/smarty to 3.0.7 or later.","affected":[{"fixed":"3.0.7","introduced":"0"}],"component":"smarty/smarty","cve_ids":["CVE-2011-1028"],"ecosystem":"Packagist","epss":0.01613,"exploited":false,"fixed_versions":["3.0.7"],"ghsa_id":"GHSA-6frx-2r5w-c524","id":"tcs_01M5KEX0H45C0V5PMCXF5J32QP","modified_at":"2024-02-16T08:21:02.337201Z","published_at":"2022-04-22T00:24:15Z","references":["https://osv.dev/vulnerability/GHSA-6frx-2r5w-c524","https://nvd.nist.gov/vuln/detail/CVE-2011-1028","https://github.com/smarty-php/smarty/commit/0154f17de2b2dd16ff9c016923015ac19af9c0cb","https://github.com/smarty-php/smarty","https://seclists.org/oss-sec/2011/q1/313","https://security-tracker.debian.org/tracker/CVE-2011-1028","https://web.archive.org/web/20110609032516/http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt","https://www.smarty.net/forums/viewtopic.php?t=18815"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-6frx-2r5w-c524","url":"https://osv.dev/vulnerability/GHSA-6frx-2r5w-c524"}],"summary":"Smarty3 Arbitrary PHP Code Execution"}