7.5

CVE-2009-5054

Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Smarty ≫ Smarty Version <= 2.6.26
Smarty ≫ Smarty Version1.0
Smarty ≫ Smarty Version1.0a
Smarty ≫ Smarty Version1.0b
Smarty ≫ Smarty Version1.1.0
Smarty ≫ Smarty Version1.2.0
Smarty ≫ Smarty Version1.2.1
Smarty ≫ Smarty Version1.2.2
Smarty ≫ Smarty Version1.3.0
Smarty ≫ Smarty Version1.3.1
Smarty ≫ Smarty Version1.3.2
Smarty ≫ Smarty Version1.4.0
Smarty ≫ Smarty Version1.4.0 Updateb1
Smarty ≫ Smarty Version1.4.0 Updateb2
Smarty ≫ Smarty Version1.4.1
Smarty ≫ Smarty Version1.4.2
Smarty ≫ Smarty Version1.4.3
Smarty ≫ Smarty Version1.4.4
Smarty ≫ Smarty Version1.4.5
Smarty ≫ Smarty Version1.4.6
Smarty ≫ Smarty Version1.5.0
Smarty ≫ Smarty Version1.5.1
Smarty ≫ Smarty Version1.5.2
Smarty ≫ Smarty Version2.0.0
Smarty ≫ Smarty Version2.0.1
Smarty ≫ Smarty Version2.1.0
Smarty ≫ Smarty Version2.1.1
Smarty ≫ Smarty Version2.2.0
Smarty ≫ Smarty Version2.3.0
Smarty ≫ Smarty Version2.3.1
Smarty ≫ Smarty Version2.4.0
Smarty ≫ Smarty Version2.4.1
Smarty ≫ Smarty Version2.4.2
Smarty ≫ Smarty Version2.5.0
Smarty ≫ Smarty Version2.5.0 Updaterc1
Smarty ≫ Smarty Version2.5.0 Updaterc2
Smarty ≫ Smarty Version2.6.0
Smarty ≫ Smarty Version2.6.0 Updaterc1
Smarty ≫ Smarty Version2.6.0 Updaterc2
Smarty ≫ Smarty Version2.6.0 Updaterc3
Smarty ≫ Smarty Version2.6.1
Smarty ≫ Smarty Version2.6.2
Smarty ≫ Smarty Version2.6.3
Smarty ≫ Smarty Version2.6.4
Smarty ≫ Smarty Version2.6.5
Smarty ≫ Smarty Version2.6.6
Smarty ≫ Smarty Version2.6.7
Smarty ≫ Smarty Version2.6.9
Smarty ≫ Smarty Version2.6.10
Smarty ≫ Smarty Version2.6.11
Smarty ≫ Smarty Version2.6.12
Smarty ≫ Smarty Version2.6.13
Smarty ≫ Smarty Version2.6.14
Smarty ≫ Smarty Version2.6.15
Smarty ≫ Smarty Version2.6.16
Smarty ≫ Smarty Version2.6.17
Smarty ≫ Smarty Version2.6.18
Smarty ≫ Smarty Version2.6.20
Smarty ≫ Smarty Version2.6.22
Smarty ≫ Smarty Version2.6.24
Smarty ≫ Smarty Version2.6.25
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.08% 0.201
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P