Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
New Digital Group Smarty 路径遍历漏洞
Vulnerability Description
New Digital Group Smarty是New Digital Group公司的一款使用PHP语言编写的模板引擎。 New Digital Group Smarty 3.1.33之前版本中的‘Smarty_Security::isTrustedResourceDir()’函数存在路径遍历漏洞，该漏洞源于程序对模板代码过滤不充分。攻击者可通过控制被执行的模板代码利用该漏洞绕过可信目录安全限制并读取任意文件。
CVSS Information
N/A
Vulnerability Type
N/A