CyberRota Analysis
AI-GeneratedThe Smarty template engine for PHP is vulnerable due to improper resolution of symbolic links in the Security::_checkDir() function, allowing attackers to bypass directory containment checks. This flaw enables unauthorized access to arbitrary files within the PHP process, posing a risk to sensitive data. Organizations using affected versions should prioritize upgrading to versions 5.8.2 or 4.5.7 to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to 5.8.2 (and 4.5.7 on the 4.x line), Security::_checkDir() does not fully resolve symbolic links before validating that a requested path lies within a configured secure directory. An attacker able to place or reference a symlink within a directory Smarty treats as trusted (e.g., a template or config directory) could use it to point outside the intended secure directory, bypassing the containment check and reading arbitrary files accessible to the PHP process. This issue is fixed in versions 5.8.2 and 4.5.7.