Smarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2) private object members of an assigned object, which has unspecified impact and remote attack vectors.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2010-4688 | Smarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2) private object members of an assigned object, which has unspecified impact and remote attack vectors. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-09-16T20:47:30.850Z
Reserved: 2011-02-03T00:00:00Z
Link: CVE-2010-4723
No data.
Status : Deferred
Published: 2011-02-03T17:00:01.947
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-4723
No data.
OpenCVE Enrichment
No data.
EUVD