CVE-2023-28447GHSA-7J98-H7FP-4VWJ
Cross site scripting vulnerability in Javascript escaping in smarty/smarty
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.3.1, 3.1.48
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 1 proof of concept on GitHub
Summary
Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user's browser session. This may lead to unauthorized access to sensitive user data, manipulation of the web application's behavior, or unauthorized actions performed on behalf of the user. Users are advised to upgrade to either version 3.1.48 or to 4.3.1 to resolve this issue. There are no known workarounds for this vulnerability.
Timeline
- CVE published
- Record last updated
Affected versions
- smarty-php smarty
From 4.0.0 · fixed in 4.3.1; fixed in 3.1.48
- smarty/smartyPackagist
From 4.0.0 · fixed in 4.3.1
- smarty/smartyPackagist
fixed in 3.1.48