CVE-2010-4723

Smarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2) private object members of an assigned object, which has unspecified impact and remote attack vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 61%
VendorProductVersion
smartysmarty
𝑥
≤ 3.0.0
smartysmarty
1.0
smartysmarty
1.0a:a
smartysmarty
1.0b:b
smartysmarty
1.1.0
smartysmarty
1.2.0
smartysmarty
1.2.1
smartysmarty
1.2.2
smartysmarty
1.3.0
smartysmarty
1.3.1
smartysmarty
1.3.2
smartysmarty
1.4.0
smartysmarty
1.4.0:b1
smartysmarty
1.4.0:b2
smartysmarty
1.4.1
smartysmarty
1.4.2
smartysmarty
1.4.3
smartysmarty
1.4.4
smartysmarty
1.4.5
smartysmarty
1.4.6
smartysmarty
1.5.0
smartysmarty
1.5.1
smartysmarty
1.5.2
smartysmarty
2.0.0
smartysmarty
2.0.1
smartysmarty
2.1.0
smartysmarty
2.1.1
smartysmarty
2.2.0
smartysmarty
2.3.0
smartysmarty
2.3.1
smartysmarty
2.4.0
smartysmarty
2.4.1
smartysmarty
2.4.2
smartysmarty
2.5.0
smartysmarty
2.5.0:rc1
smartysmarty
2.5.0:rc2
smartysmarty
2.6.0
smartysmarty
2.6.0:rc1
smartysmarty
2.6.0:rc2
smartysmarty
2.6.0:rc3
smartysmarty
2.6.1
smartysmarty
2.6.2
smartysmarty
2.6.3
smartysmarty
2.6.4
smartysmarty
2.6.5
smartysmarty
2.6.6
smartysmarty
2.6.7
smartysmarty
2.6.9
smartysmarty
2.6.10
smartysmarty
2.6.11
smartysmarty
2.6.12
smartysmarty
2.6.13
smartysmarty
2.6.14
smartysmarty
2.6.15
smartysmarty
2.6.16
smartysmarty
2.6.17
smartysmarty
2.6.18
smartysmarty
2.6.20
smartysmarty
2.6.22
smartysmarty
2.6.24
smartysmarty
2.6.25
smartysmarty
2.6.26
smartysmarty
3.0.0:beta4
smartysmarty
3.0.0:beta5
smartysmarty
3.0.0:beta6
smartysmarty
3.0.0:beta7
smartysmarty
3.0.0:beta8
smartysmarty
3.0.0:rc1
smartysmarty
3.0.0:rc2
smartysmarty
3.0.0:rc3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
smarty3
bullseye (security)
3.1.39-2+deb11u1
fixed
bullseye
3.1.39-2+deb11u1
fixed
bookworm
3.1.47-2
fixed
sid
3.1.48-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gallery2
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
dne
utopic
dne
trusty
dne
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
not-affected
oneiric
not-affected
natty
not-affected
maverick
not-affected
lucid
not-affected
karmic
not-affected
hardy
ignored
dapper
ignored
moodle
zesty
not-affected
yakkety
not-affected
xenial
not-affected
wily
not-affected
vivid
not-affected
utopic
not-affected
trusty
dne
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
not-affected
oneiric
not-affected
natty
not-affected
maverick
not-affected
lucid
not-affected
karmic
not-affected
hardy
ignored
dapper
ignored
smarty
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
dne
utopic
dne
trusty
dne
saucy
dne
raring
dne
quantal
ignored
precise
ignored
oneiric
ignored
natty
ignored
maverick
ignored
lucid
ignored
karmic
ignored
hardy
ignored
dapper
ignored
Common Weakness Enumeration
References
http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt
http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt