Servers and applications
CVE-2010-4723 Smarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2) private object members of an assigned object, which has unspecified impact and remote attack vectors.
Severity High 9.3
Published 3 Feb 2011
Last changed 16 Jun 2026
Added to UpHeron 1 Nov 2026 Exploit chance 1.7% in the next 30 daysHigher than 76% of CVEs. EPSS by FIRST , 12 Nov 2026
Attack Over the network · No login needed
Attacker can Read data · Change data · Take it down
CVSS vector AV:N/AC:M/Au:N/C:C/I:C/A:C
Sources NVD Affected software Software Affected versions SmartyServers and applications · cpe:a:smarty:smarty Version 3.0.0-rc3 Version 3.0.0-rc2 Version 3.0.0-rc1 Version 3.0.0-beta8 All 70 release lines Every version up to 3.0.0 Version 1.0 Version 1.0a Version 1.0b Version 1.1.0 Version 1.2.0 Version 1.2.1 Version 1.2.2 Version 1.3.0 Version 1.3.1 Version 1.3.2 Version 1.4.0-b1 Version 1.4.0-b2 Version 1.4.0 Version 1.4.1 Version 1.4.2 Version 1.4.3 Version 1.4.4 Version 1.4.5 Version 1.4.6 Version 1.5.0 Version 1.5.1 Version 1.5.2 Version 2.0.0 Version 2.0.1 Version 2.1.0 Version 2.1.1 Version 2.2.0 Version 2.3.0 Version 2.3.1 Version 2.4.0 Version 2.4.1 Version 2.4.2 Version 2.5.0-rc1 Version 2.5.0-rc2 Version 2.5.0 Version 2.6.0-rc1 Version 2.6.0-rc2 Version 2.6.0-rc3 Version 2.6.0 Version 2.6.1 Version 2.6.2 Version 2.6.3 Version 2.6.4 Version 2.6.5 Version 2.6.6 Version 2.6.7 Version 2.6.9 Version 2.6.10 Version 2.6.11 Version 2.6.12 Version 2.6.13 Version 2.6.14 Version 2.6.15 Version 2.6.16 Version 2.6.17 Version 2.6.18 Version 2.6.20 Version 2.6.22 Version 2.6.24 Version 2.6.25 Version 2.6.26 Version 3.0.0-beta4 Version 3.0.0-beta5 Version 3.0.0-beta6 Version 3.0.0-beta7 Version 3.0.0-beta8 Version 3.0.0-rc1 Version 3.0.0-rc2 Version 3.0.0-rc3
References NVD https://nvd.nist.gov/vuln/detail/CVE-2010-4723 CVE.org https://www.cve.org/CVERecord?id=CVE-2010-4723