Merge pull request #682 from jolelievre/patch-1

Create smarty/smarty CVE-2023-28447.yaml
FriendsOfPHP · Apr 12, 2023 · 7117104 · 7117104
2 parents 1fb89de + 77c1a0d
commit 7117104
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/smarty/smarty/CVE-2023-28447.yaml b/smarty/smarty/CVE-2023-28447.yaml
@@ -0,0 +1,11 @@
+title: Cross site scripting vulnerability in Javascript escaping
+link: https://github.com/smarty-php/smarty/security/advisories/GHSA-7j98-h7fp-4vwj
+cve: CVE-2023-28447
+branches:
+    '3.1':
+        time: 2023-03-28 19:41:00
+        versions: [ '<3.1.48' ]
+    master:
+        time: 2023-03-28 19:46:00
+        versions: [ '>=4.0.0', '<4.1.1' ]
+reference: composer://smarty/smarty