CVE-2017-1000454 - CMS Made Simple 2.1.6, 2.2, 2.2.1 are vulnerable to Smarty Template Injection in some core components, resulting in local file read before 2.2, and local file inclusion since 2.2.1

Back Back to CVE browser

HIGH

CMS Made Simple 2.1.6, 2.2, 2.2.1 are vulnerable to Smarty Template Injection in some core components, resulting in local file read before 2.2, and local file inclusion since 2.2.1

Published Jan 2, 2018

7.8

HIGH

CVSS 3.0

EPSS 0.78%

Description

CMS Made Simple 2.1.6, 2.2, 2.2.1 are vulnerable to Smarty Template Injection in some core components, resulting in local file read before 2.2, and local file inclusion since 2.2.1

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-74

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-1581
Advisory
https://www.cmsmadesimple.org/2017/07/Announcing-CMSMS-2.2.2-Hearts-Content
x_refsource_MISCIssue TrackingVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-1581		Advisory
https://www.cmsmadesimple.org/2017/07/Announcing-CMSMS-2.2.2-Hearts-Content		x_refsource_MISCIssue TrackingVendor Advisory