CVE-2018-16831 - CERT CVE

  1. CVE-2018-16831

ID CVE-2018-16831
Sažetak Smarty before 3.1.33-dev-4 allows attackers to bypass the trusted_dir protection mechanism via a file:./../ substring in an include statement.
Reference
CVSS
Base: 7.1
Impact: 6.9
Exploitability:8.6
Pristup
VektorSloženostAutentikacija
NETWORK MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
COMPLETE NONE NONE
CVSS vektor AV:N/AC:M/Au:N/C:C/I:N/A:N
Zadnje važnije ažuriranje 16-11-2018 - 14:38
Objavljeno 11-09-2018 - 13:29