Lucene search
K

16 matches found

OSV
OSV
added 2022/05/17 4:1 a.m.13 views

GHSA-FQH9-2QGG-H84H Insecure Temporary File in Jinja2

FileSystemBytecodeCache in Jinja2 prior to version 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402...

6.9CVSS6.3AI score0.00101EPSS
Exploits1References13
Github Security Blog
Github Security Blog
added 2022/05/17 4:1 a.m.16 views

Insecure Temporary File in Jinja2

FileSystemBytecodeCache in Jinja2 prior to version 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402...

4.4CVSS8.4AI score0.00101EPSS
Exploits1References13Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 4:4 a.m.17 views

Incorrect Privilege Assignment in Jinja2

The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with jinja2 in /tmp...

4.4CVSS5.8AI score0.00096EPSS
Exploits0References14Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:0 a.m.19 views

Oracle Solaris Third-Party Patch Update : jinja2 (multiple_vulnerabilities_in_jinja2)

The remote Solaris system is missing necessary patches to address security updates : - FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this...

4.4CVSS8.1AI score0.00101EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2014/06/11 5:13 p.m.32 views

Moderate: Red Hat Security Advisory: python33-python-jinja2 and python27-python-jinja2 security update

Updated python33-python-jinja2 and python27-python-jinja2 packages that fix one security issue are now available for Red Hat Software Collections 1. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

4.4CVSS7.6AI score0.00096EPSS
Exploits0References2
OSV
OSV
added 2014/05/19 2:55 p.m.1 views

DEBIAN-CVE-2014-0012

FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402...

4.4CVSS6.9AI score0.00101EPSS
Exploits1References1
NVD
NVD
added 2014/05/19 2:55 p.m.6 views

CVE-2014-0012

FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402...

4.4CVSS6.2AI score0.00101EPSS
Exploits1References8
Prion
Prion
added 2014/05/19 2:55 p.m.14 views

Default configuration

The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with jinja2 in /tmp...

4.4CVSS6.4AI score0.00096EPSS
Exploits0References17Affected Software1
PyPA
PyPA
added 2014/05/19 2:55 p.m.4 views

PYSEC-2014-82

FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402...

4.4CVSS6.9AI score0.00101EPSS
Exploits1References8Affected Software1
Cvelist
Cvelist
added 2014/05/19 2:0 p.m.15 views

CVE-2014-0012

FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402...

6.1AI score0.00101EPSS
Exploits1References8
Cvelist
Cvelist
added 2014/05/19 2:0 p.m.18 views

CVE-2014-1402

The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with jinja2 in /tmp...

6AI score0.00096EPSS
Exploits0References17
Debian CVE
Debian CVE
added 2014/05/19 2:0 p.m.13 views

CVE-2014-0012

FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402...

4.4CVSS8.9AI score0.00101EPSS
Exploits1
CVE
CVE
added 2014/05/19 2:0 p.m.166 views

CVE-2014-0012

CVE-2014-0012 affects Jinja2 2.7.2: FileSystemBytecodeCache does not securely create temporary directories, allowing a local user to gain privileges by pre-creating a temp directory with that user’s UID. The issue exists due to an incomplete prior fix for CVE-2014-1402. Several connected advisori...

4.4CVSS6.2AI score0.00101EPSS
Exploits1References8Affected Software1
UbuntuCve
UbuntuCve
added 2014/05/19 12:0 a.m.12 views

CVE-2014-0012

FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402...

4.4CVSS7.2AI score0.00101EPSS
Exploits1References2
GitLab Advisory Database
GitLab Advisory Database
added 2014/05/19 12:0 a.m.24 views

Incorrect Default Permissions

The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with jinja2 in /tmp...

4.4CVSS5.7AI score0.00096EPSS
Exploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2014/05/19 12:0 a.m.27 views

CVE-2014-1402

The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with jinja2 in /tmp...

4.4CVSS7.2AI score0.00096EPSS
Exploits0References2
Rows per page
Query Builder