7.5

CVE-2009-5054

Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations.

Data is provided by the National Vulnerability Database (NVD)
Smarty ≫ Smarty Version <= 2.6.26
Smarty ≫ Smarty Version1.0
Smarty ≫ Smarty Version1.0a
Smarty ≫ Smarty Version1.0b
Smarty ≫ Smarty Version1.1.0
Smarty ≫ Smarty Version1.2.0
Smarty ≫ Smarty Version1.2.1
Smarty ≫ Smarty Version1.2.2
Smarty ≫ Smarty Version1.3.0
Smarty ≫ Smarty Version1.3.1
Smarty ≫ Smarty Version1.3.2
Smarty ≫ Smarty Version1.4.0
Smarty ≫ Smarty Version1.4.0 Updateb1
Smarty ≫ Smarty Version1.4.0 Updateb2
Smarty ≫ Smarty Version1.4.1
Smarty ≫ Smarty Version1.4.2
Smarty ≫ Smarty Version1.4.3
Smarty ≫ Smarty Version1.4.4
Smarty ≫ Smarty Version1.4.5
Smarty ≫ Smarty Version1.4.6
Smarty ≫ Smarty Version1.5.0
Smarty ≫ Smarty Version1.5.1
Smarty ≫ Smarty Version1.5.2
Smarty ≫ Smarty Version2.0.0
Smarty ≫ Smarty Version2.0.1
Smarty ≫ Smarty Version2.1.0
Smarty ≫ Smarty Version2.1.1
Smarty ≫ Smarty Version2.2.0
Smarty ≫ Smarty Version2.3.0
Smarty ≫ Smarty Version2.3.1
Smarty ≫ Smarty Version2.4.0
Smarty ≫ Smarty Version2.4.1
Smarty ≫ Smarty Version2.4.2
Smarty ≫ Smarty Version2.5.0
Smarty ≫ Smarty Version2.5.0 Updaterc1
Smarty ≫ Smarty Version2.5.0 Updaterc2
Smarty ≫ Smarty Version2.6.0
Smarty ≫ Smarty Version2.6.0 Updaterc1
Smarty ≫ Smarty Version2.6.0 Updaterc2
Smarty ≫ Smarty Version2.6.0 Updaterc3
Smarty ≫ Smarty Version2.6.1
Smarty ≫ Smarty Version2.6.2
Smarty ≫ Smarty Version2.6.3
Smarty ≫ Smarty Version2.6.4
Smarty ≫ Smarty Version2.6.5
Smarty ≫ Smarty Version2.6.6
Smarty ≫ Smarty Version2.6.7
Smarty ≫ Smarty Version2.6.9
Smarty ≫ Smarty Version2.6.10
Smarty ≫ Smarty Version2.6.11
Smarty ≫ Smarty Version2.6.12
Smarty ≫ Smarty Version2.6.13
Smarty ≫ Smarty Version2.6.14
Smarty ≫ Smarty Version2.6.15
Smarty ≫ Smarty Version2.6.16
Smarty ≫ Smarty Version2.6.17
Smarty ≫ Smarty Version2.6.18
Smarty ≫ Smarty Version2.6.20
Smarty ≫ Smarty Version2.6.22
Smarty ≫ Smarty Version2.6.24
Smarty ≫ Smarty Version2.6.25
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.08% 0.201
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P