XSS in Smarty
CVE-2023-28447
Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user's browser session. This may lead to unauthorized access to sensitive user data, manipulation of the web application's behavior, or unauthorized actions performed on behalf of the user. Users are advised to upgrade to either version 3.1.48 or to 4.3.1 to resolve this issue. There are no known workarounds for this vulnerability.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.010 (61.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L.
Affected products
- Smarty
- Smarty-php Smarty — versions >= 4.0.0, < 4.3.1, < 3.1.48
- Fedoraproject Fedora — versions 36, 37, 38
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security-advisories@github.com (x_refsource_CONFIRM, Third Party Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC)
- security-advisories@github.com (Mailing List, Third Party Advisory)
- security-advisories@github.com (Mailing List, Third Party Advisory)
- security-advisories@github.com (Mailing List, Third Party Advisory)
- af854a3a-2127-422b-91ae-364da2661108
Frequently asked questions
- What is CVE-2023-28447?
- CVE-2023-28447 is a high-severity vulnerability in Smarty, classified under Cross-site Scripting. CVSS score: 7.1/10. Published 2023-03-28.
- How severe is CVE-2023-28447?
- High severity. CVSS v3 base score is 7.1 out of 10.
- Is CVE-2023-28447 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.