smarty4: CVE-2018-25047: smarty_function_mailto - JavaScript injection in eval function

Debian Bug report logs - #1019896
smarty4: CVE-2018-25047: smarty_function_mailto - JavaScript injection in eval function

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: smarty4: CVE-2018-25047: smarty_function_mailto - JavaScript injection in eval function

Date: Thu, 15 Sep 2022 21:49:13 +0200

Source: smarty4
Version: 4.1.1-1
Severity: important
Tags: security upstream
Forwarded: https://github.com/smarty-php/smarty/issues/454
X-Debbugs-Cc: carnil@debian.org, Debian Security Team <team@security.debian.org>
Control: clone -1 -2
Control: reassign -2 src:smarty3 3.1.45-1
Control: retitle -2 smarty3: CVE-2018-25047: smarty_function_mailto - JavaScript injection in eval function
Control: found -2 3.1.39-2+deb11u1
Control: found -2 3.1.39-2

Hi,

The following vulnerability was published for smarty4.

CVE-2018-25047[0]:
| In Smarty before 3.1.47 and 4.x before 4.2.1,
| libs/plugins/function.mailto.php allows XSS. A web page that uses
| smarty_function_mailto, and that could be parameterized using GET or
| POST input parameters, could allow injection of JavaScript code by a
| user.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2018-25047
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25047
[1] https://github.com/smarty-php/smarty/issues/454
[2] https://github.com/smarty-php/smarty/commit/f1f7ee6e34c14a8a9dfa5c6ef894d39277a93938 (v3.1.47)
[3] https://github.com/smarty-php/smarty/commit/55ea25d1f50f0406fb1ccedd212c527977793fc9 (v4.2.1)

Regards,
Salvatore

Send a report that this bug log contains spam.