Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Smarty umask值权限许可和访问控制漏洞
Vulnerability Description
New Digital Group Smarty是New Digital Group公司的一款使用PHP语言编写的模板引擎。 Smarty 3.0.0 beta 6之前版本当设置文件许可时，没有考虑umask值。攻击者可以借助标准文件系统操作，绕过预设的访问限制。
CVSS Information
N/A
Vulnerability Type
N/A