CVE-2018-25047: smarty_function_mailto - JavaScript injection in eval function
In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smartyfunctionmailto, and that could be parameterized using GET or POST input parameters, could allow injection of JavaScript code by a user.
Other sources
smartyfunctionmailto - JavaScript injection in eval function
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/smarty3to a version that resolves this vulnerability.Fixed in 3.1.39-2+deb11u2Fixed in 3.1.47-2+deb12u1Fixed in 3.1.48-2 - Upgrade
Upgrade
debian/smarty4to a version that resolves this vulnerability.Fixed in 4.3.0-1+deb12u2Fixed in 4.5.5-1 - Upgrade
Upgrade
composer/smarty/smartyto a version that resolves this vulnerability.Fixed in 3.1.47 - Upgrade
Upgrade
composer/smarty/smartyto a version that resolves this vulnerability.Fixed in 4.2.1 - Upgrade
Upgrade
Smartyto a version that resolves this vulnerability.Fixed in 3.1.47 - Upgrade
Upgrade
Smartyto a version that resolves this vulnerability.Fixed in 4.2.1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-25047?
CVE-2018-25047 is considered to have a high severity due to its potential for allowing cross-site scripting (XSS) attacks.
How do I fix CVE-2018-25047?
To fix CVE-2018-25047, upgrade Smarty to version 3.1.48 or 4.2.1 or later.
Which versions of Smarty are affected by CVE-2018-25047?
CVE-2018-25047 affects Smarty versions prior to 3.1.48 and versions between 4.0.0 and 4.2.1.
What types of attacks can CVE-2018-25047 facilitate?
CVE-2018-25047 can facilitate cross-site scripting (XSS) attacks by allowing the injection of JavaScript code.
Are there any specific software packages vulnerable due to CVE-2018-25047?
Vulnerable software packages include specified versions of Smarty 3.x and 4.x, particularly under Debian systems.