SUSE-SU-2024:1863-2 Security update for python-Jinja2

This update for python-Jinja2 fixes the following issues: - Fixed HTML attribute injection when passing user input as keys to xmlattr filter CVE-2024-34064, bsc1223980, CVE-2024-22195, bsc1218722...

Fedora: Security Advisory (FEDORA-2024-e609c057ad)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : python-jinja2 (2024-2005708761)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-2005708761 advisory. Update to 3.1.4 rhbz2279211,rhbz2279491 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Fedora 39 : mingw-python-jinja2 (2024-e609c057ad)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-e609c057ad advisory. Update to jinja2-3.1.4, fixes CVE-2024-34064. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 40 : mingw-python-jinja2 (2024-e3caf31c98)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-e3caf31c98 advisory. Update to jinja2-3.1.4, fixes CVE-2024-34064. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

RHEL 6 : jinja2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - jinja2: HTML attribute injection when passing user input as keys to xmlattr filter CVE-2024-22195 - Jinja...

BELL-CVE-2024-34064

Bulletin has no description...

SUSE CVE-2024-34064

Jinja is an extensible templating engine. The xmlattr filter in affected versions of Jinja accepts keys containing non-attribute characters. XML/HTML attributes cannot contain spaces, /, , or =, as each would then be interpreted as starting a separate attribute. If an application accepts keys as...

CVE-2024-34064 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, dask-gateway, py3-jinja2, reflex, superset, nemo, confluent-docker-utils, checkov, kubeflow-volumes-web-app...

CVE-2024-34064 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, confluent-docker-utils, py3-jinja2, dask-gateway, superset, reflex, kubeflow-jupyter-web-app, checkov, kubeflow-volumes-web-app...

CVE-2024-34064

Jinja is an extensible templating engine. The xmlattr filter in affected versions of Jinja accepts keys containing non-attribute characters. XML/HTML attributes cannot contain spaces, /, , or =, as each would then be interpreted as starting a separate attribute. If an application accepts keys as...

CVE-2024-34064 Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

Jinja is an extensible templating engine. The xmlattr filter in affected versions of Jinja accepts keys containing non-attribute characters. XML/HTML attributes cannot contain spaces, /, , or =, as each would then be interpreted as starting a separate attribute. If an application accepts keys as...

CVE-2024-34064 Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

Jinja is an extensible templating engine. The xmlattr filter in affected versions of Jinja accepts keys containing non-attribute characters. XML/HTML attributes cannot contain spaces, /, , or =, as each would then be interpreted as starting a separate attribute. If an application accepts keys as...

CVE-2023-34064

creationtimestamp| type| source ---|---|--- 2024-01-04 08:41:42+00:00| seen| https://t.me/ctinow/162843...

CVE-2023-34064

CVE-2023-34064 affects VMware Workspace ONE Launcher. The issue is a privilege escalation via the Edge Panel feature that, with physical access, could bypass setup and expose sensitive information. Public sources describe it as a privilege escalation vulnerability in Workspace ONE Launcher, with ...

VMware Workspace ONE Launcher updates addresses privilege escalation vulnerability. (CVE-2023-34064)

3. Privilege Escalation Vulnerability Workspace ONE Launcher contains a Privilege Escalation Vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 6.3...

CVE-2021-34064

creationtimestamp| type| source ---|---|--- 2023-02-24 18:19:20+00:00| seen| https://t.me/cibsecurity/58876...

CVE-2022-34064

creationtimestamp| type| source ---|---|--- 2022-06-25 00:31:23+00:00| seen| https://t.me/cibsecurity/45129...

CVE-2022-34064

The Zibal package in PyPI v1.0.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34064

CVE-2022-34064 affects the PyPI package zibal (v1.0.0). Multiple connected sources describe a code execution backdoor in Zibal, enabling an attacker to execute arbitrary code and access sensitive user information and digital currency keys, with privilege escalation. The documents do not specify a...