CVE-2009-5054

Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access…

published February 3, 2011

CVSS
—
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01589 · 75.4th percentile
Published
2011-02-03T16:00Z
EPSS history
Timeline
  • 03 FEB 16:00Z
    Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access…
    cvelistv5