Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-a3yk-8fmf-x7fw
Vulnerability ID VCID-a3yk-8fmf-x7fw
Aliases CVE-2024-35226
GHSA-4rmg-292m-wg3w
Summary Smarty vulnerable to PHP Code Injection by malicious attribute in extends-tag Template authors could inject php code by choosing a malicous file name for an extends-tag. Users that cannot fully trust template authors should update asap.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-94 Improper Control of Generation of Code ('Code Injection')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00279 https://api.first.org/data/v1/epss?cve=CVE-2024-35226
epss 0.00279 https://api.first.org/data/v1/epss?cve=CVE-2024-35226
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-4rmg-292m-wg3w
cvssv3.1 7.3 https://github.com/smarty-php/smarty
generic_textual HIGH https://github.com/smarty-php/smarty
cvssv3.1 7.3 https://github.com/smarty-php/smarty/commit/0be92bc8a6fb83e6e0d883946f7e7c09ba4e857a
generic_textual HIGH https://github.com/smarty-php/smarty/commit/0be92bc8a6fb83e6e0d883946f7e7c09ba4e857a
ssvc Track https://github.com/smarty-php/smarty/commit/0be92bc8a6fb83e6e0d883946f7e7c09ba4e857a
cvssv3.1 7.3 https://github.com/smarty-php/smarty/security/advisories/GHSA-4rmg-292m-wg3w
cvssv3.1_qr HIGH https://github.com/smarty-php/smarty/security/advisories/GHSA-4rmg-292m-wg3w
generic_textual HIGH https://github.com/smarty-php/smarty/security/advisories/GHSA-4rmg-292m-wg3w
ssvc Track https://github.com/smarty-php/smarty/security/advisories/GHSA-4rmg-292m-wg3w
cvssv3.1 7.3 https://lists.debian.org/debian-lts-announce/2024/11/msg00013.html
generic_textual HIGH https://lists.debian.org/debian-lts-announce/2024/11/msg00013.html
cvssv3.1 7.3 https://nvd.nist.gov/vuln/detail/CVE-2024-35226
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2024-35226
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2024-35226
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35226
https://github.com/smarty-php/smarty
https://github.com/smarty-php/smarty/commit/0be92bc8a6fb83e6e0d883946f7e7c09ba4e857a
https://lists.debian.org/debian-lts-announce/2024/11/msg00013.html
1072529 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072529
1072530 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072530
CVE-2024-35226 https://nvd.nist.gov/vuln/detail/CVE-2024-35226
GHSA-4rmg-292m-wg3w https://github.com/advisories/GHSA-4rmg-292m-wg3w
GHSA-4rmg-292m-wg3w https://github.com/smarty-php/smarty/security/advisories/GHSA-4rmg-292m-wg3w
USN-7158-1 https://usn.ubuntu.com/7158-1/
USN-7377-1 https://usn.ubuntu.com/7377-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N Found at https://github.com/smarty-php/smarty
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N Found at https://github.com/smarty-php/smarty/commit/0be92bc8a6fb83e6e0d883946f7e7c09ba4e857a
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-03T18:08:18Z/ Found at https://github.com/smarty-php/smarty/commit/0be92bc8a6fb83e6e0d883946f7e7c09ba4e857a
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N Found at https://github.com/smarty-php/smarty/security/advisories/GHSA-4rmg-292m-wg3w
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-03T18:08:18Z/ Found at https://github.com/smarty-php/smarty/security/advisories/GHSA-4rmg-292m-wg3w
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N Found at https://lists.debian.org/debian-lts-announce/2024/11/msg00013.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2024-35226
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.51593
EPSS Score 0.00279
Published At June 5, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T16:21:48.238806+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/smarty/smarty/CVE-2024-35226.yml 38.6.0