Smarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2) private object members of an assigned object, which has unspecified impact and remote attack vectors.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2011-02-03T16:00:00Z

Updated: 2024-09-16T20:47:30.850Z

Reserved: 2011-02-03T00:00:00Z

Link: CVE-2010-4723

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2011-02-03T17:00:01.947

Modified: 2011-02-15T05:00:00.000

Link: CVE-2010-4723

cve-icon Redhat

No data.