Vulnerabilities (CVE)

Filtered by vendor Pocoo Subscribe
Filtered by product Jinja2
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-1402 1 Pocoo 1 Jinja2 2017-12-22 4.4 MEDIUM N/A
The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with __jinja2_ in /tmp.
CVE-2014-0012 1 Pocoo 1 Jinja2 2015-12-14 4.4 MEDIUM N/A
FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402.