CVE:CVE-2022-29221
CNNVD:CNNVD-202205-3616
Smarty是基于PHP的模板引擎，有助于将表示 (HTML/CSS) 与应用程序逻辑分离。
Smarty 3.1.45之前的3.1.x版本以及4.1.1之前的4.1.x版本存在代码注入漏洞，远程攻击者利用该漏洞可以发送专门编写的请求，并在目标系统上执行任意PHP代码。
solution:Upgrade smarty smarty to a higher version than 3.1.45,4.1.1,and avoid the version (,3.1.45),[4.0.0,4.1.1); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade fedoraproject fedora to a higher version than 36,37,and avoid the version 36,37