VIR Vulnerability Intelligence Relay

CVE-2014-8350

high
Published 2014-11-03 · Modified 2024-12-06
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
7.5

Description

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "{literal}<{/literal}script language=php>" in a template.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

OS impact
debian Debian Fixed 5 releases
VersionStatusFixed in
trixie Fixed 3.1.21-1
sid Fixed 3.1.21-1
forky Fixed 3.1.21-1
bullseye Fixed 3.1.21-1
bookworm Fixed 3.1.21-1

Package impact
EcosystemPackageVulnerableFixed
php Packagistsmarty/smarty<3.1.213.1.21

Application impact
VendorProductVersionsFixed
smartysmarty{"endIncluding":"3.1.20"}
smartysmarty1.0
smartysmarty1.0a
smartysmarty1.0b
smartysmarty1.1.0
smartysmarty1.2.0
smartysmarty1.2.1
smartysmarty1.2.2
smartysmarty1.3.0
smartysmarty1.3.1
smartysmarty1.3.2
smartysmarty1.4.0
smartysmarty1.4.1
smartysmarty1.4.2
smartysmarty1.4.3
smartysmarty1.4.4
smartysmarty1.4.5
smartysmarty1.4.6
smartysmarty1.5.0
smartysmarty1.5.1
smartysmarty1.5.2
smartysmarty2.0.0
smartysmarty2.0.1
smartysmarty2.1.0
smartysmarty2.1.1
smartysmarty2.2.0
smartysmarty2.3.0
smartysmarty2.3.1
smartysmarty2.4.0
smartysmarty2.4.1
smartysmarty2.4.2
smartysmarty2.5.0
smartysmarty2.6.0
smartysmarty2.6.1
smartysmarty2.6.2
smartysmarty2.6.3
smartysmarty2.6.4
smartysmarty2.6.5
smartysmarty2.6.6
smartysmarty2.6.7
smartysmarty2.6.9
smartysmarty2.6.10
smartysmarty2.6.11
smartysmarty2.6.12
smartysmarty2.6.13
smartysmarty2.6.14
smartysmarty2.6.15
smartysmarty2.6.16
smartysmarty2.6.17
smartysmarty2.6.18
smartysmarty2.6.20
smartysmarty2.6.22
smartysmarty2.6.24
smartysmarty2.6.25
smartysmarty2.6.26
smartysmarty3.0.0
smartysmarty3.0.1
smartysmarty3.0.2
smartysmarty3.0.3
smartysmarty3.0.4
smartysmarty3.0.5
smartysmarty3.0.6
smartysmarty3.0.7
smartysmarty3.1
smartysmarty3.1.0
smartysmarty3.1.1
smartysmarty3.1.2
smartysmarty3.1.3
smartysmarty3.1.4
smartysmarty3.1.5
smartysmarty3.1.6
smartysmarty3.1.7
smartysmarty3.1.8
smartysmarty3.1.9
smartysmarty3.1.10
smartysmarty3.1.11
smartysmarty3.1.12
smartysmarty3.1.13
smartysmarty3.1.14
smartysmarty3.1.15
smartysmarty3.1.16
smartysmarty3.1.17
smartysmarty3.1.18
smartysmarty3.1.19

References

CWEs

CWE-94

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.