CVE-2018-13982: debian debian_linux Path Traversal
CVSS: 7.5v3.1HighModified
AliasesMGASA-2018-0403UBUNTU-CVE-2018-13982DEBIAN-CVE-2018-13982
Published 18-09-2018Last modified 05-08-2024
Vulnerability summary
CVE-2018-13982 is a high (CVSS 7.5) Path Traversal vulnerability in debian debian_linux. EPSS estimates a 3.46% chance of exploitation in the next 30 days, higher than 88.9% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
7.5/10
010
High · v3.1 (NVD)EPSS score
3.46%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github
Advisory lineage
Upstream 0 · Downstream 3 · Related 1Timeline
- 18-09-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files.
CVSS metrics
5 scores · 3 sources · 3 versionsHigh 7.5Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
High 7.5Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NSourcesSingle source
Medium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
3.46%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.46% on 19-09-2026
19-09-202619-10-2026
EPSS score3.46%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundAdvisories
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Debian2 products
- smarty3< 3.1.33+20180830.1.3a78a21f+selfpack1-1
- debian_linuxEOL9.0
Mageia1 product
- php-smarty< 3.1.33-1.2.mga6
Smarty1 product
- smarty< 3.1.33
Ubuntu1 product
- smarty3< 3.1.31+20161214.1.c7d42e4+selfpack1-3ubuntu0.1
4 vendors · 5 products
References
16 links- github.com/smarty-php/smarty/commit/2e081a51b1effddb23f87952959139ac62654d50X Refsource CONFIRMPatchVendor Advisory
- github.com/smarty-php/smarty/commit/f9ca3c63d1250bb56b2bda609dcc9dd81f0065f8X Refsource CONFIRMPatchVendor Advisory
- github.com/smarty-php/smarty/commit/c9dbe1d08c081912d02bd851d1d1b6388f6133d1X Refsource CONFIRMPatchVendor Advisory
- github.com/smarty-php/smarty/commit/8d21f38dc35c4cd6b31c2f23fc9b8e5adbc56dfeX Refsource CONFIRMPatchVendor Advisory
- github.com/smarty-php/smarty/commit/bcedfd6b58bed4a7366336979ebaa5a240581531X Refsource CONFIRMPatchVendor Advisory
- github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180420-01_Smarty_Path_TraversalX Refsource MISCExploitPatchThird Party AdvisoryREPORT
lists.debian.org/debian-lts-announce/2021/04/msg00004.htmlMailing ListX Refsource MLISTThird Party Advisory- lists.debian.org/debian-lts-announce/2021/04/msg00014.htmlMailing ListX Refsource MLISTThird Party Advisory
- lists.debian.org/debian-lts-announce/2021/10/msg00015.htmlMailing ListX Refsource MLISTThird Party Advisory