high7.5
CVE-2009-5054
Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restr…
Impact
Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smarty | Smarty | through 2.6.26 Versions 1.0, 1.0a, 1.0b, 1.1.0, 1.2.0 |