Lucene search
+L

16 matches found

Github Security Blog
Github Security Blog
added 2022/05/17 4:1 a.m.25 views

Insecure Temporary File in Jinja2

FileSystemBytecodeCache in Jinja2 prior to version 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402...

4.4CVSS8.4AI score0.0043EPSS
SaveExploits1References13Affected Software1
Rows per page
Query Builder