In Pallets Jinja before 2.10.1, str.formatmap allows a sandbox escape...
8.6CVSS6.8AI score0.03633EPSS
SaveExploits1References5
Cvelist•added 2017/02/24 8:0 p.m.•27 views
CVE-2016-4043
Chameleon five.pt in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates...
