CVE-2018-25047

Severity Score

5.4

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smarty_function_mailto, and that could be parameterized using GET or POST input parameters, could allow injection of JavaScript code by a user.

En Smarty versiones anteriores a 3.1.47 y 4.x anteriores a 4.2.1, el archivo libs/plugins/function.mailto.php permite un ataque de tipo XSS. Una página web que usa smarty_function_mailto, y que pueda ser parametrizada usando parámetros de entrada GET o POST, podría permitir una inyección de código JavaScript por parte de un usuario

*Credits: N/A

CVSS Scores

NISTv3.1 5.4

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2022-09-14 CVE Reserved
2022-09-14 CVE Published
2024-04-21 EPSS Updated
2024-08-05 CVE Updated
2024-08-05 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CAPEC

References (6)

URL	Tag	Source
https://bugs.gentoo.org/870100	Issue Tracking
https://github.com/smarty-php/smarty/releases/tag/v3.1.47	Release Notes
https://github.com/smarty-php/smarty/releases/tag/v4.2.1	Release Notes
https://lists.debian.org/debian-lts-announce/2023/01/msg00002.html	Mailing List

URL	Date	SRC
https://github.com/smarty-php/smarty/issues/454	2024-08-05

URL	Date	SRC

URL	Date	SRC
https://security.gentoo.org/glsa/202209-09	2023-03-03

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Smarty Search vendor "Smarty"		Smarty Search vendor "Smarty" for product "Smarty"				< 3.1.47 Search vendor "Smarty" for product "Smarty" and version " < 3.1.47"		-		Affected
Smarty Search vendor "Smarty"		Smarty Search vendor "Smarty" for product "Smarty"				>= 4.0.0 < 4.2.1 Search vendor "Smarty" for product "Smarty" and version " >= 4.0.0 < 4.2.1"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				10.0 Search vendor "Debian" for product "Debian Linux" and version "10.0"		-		Affected