Published: 19/05/2014 Updated: 07/11/2023

CVSS v2 Base Score: 4.4 | Impact Score: 6.4 | Exploitability Score: 3.4

VMScore: 392

Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P

FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402.

Vulnerable Product	Search on Vulmon	Subscribe to Product
pocoo jinja2 2.7.2

A security issue was fixed in Jinja2 ...

Debian Bug report logs - #734956 jinja2: CVE-2014-0012: unsafe temporary files creation Package: jinja2; Maintainer for jinja2 is Piotr Ożarowski <piotr@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 11 Jan 2014 07:24:02 UTC Severity: important Tags: security, upstream Found in versio ...

Debian Bug report logs - #734747 jinja2: CVE-2014-1402: jinja2bccacheFileSystemBytecodeCache: insecure default directory Package: python-jinja2; Maintainer for python-jinja2 is Piotr Ożarowski <piotr@debianorg>; Source for python-jinja2 is src:jinja2 (PTS, buildd, popcon) Reported by: Jakub Wilk <jwilk@debianorg> ...

FileSystemBytecodeCache in Jinja2 272 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402 ...

Analysis on vulnerability database osv.dev focused on commit-related data

OSVdev analysis Setup Data Run make data/swhdb to fetch the data from OSV and add it to the database, creating a csv file at data/osvcsv graph-tool Shell The shell is used to colorize graphs using parquet file and is not optimized for large graphs Requirements The shell and more specifically utils/pq_graphpy require graph-tool As this is a package not available through p

CWE-264 https://bugzilla.redhat.com/show_bug.cgi?id=1051421 https://github.com/mitsuhiko/jinja2/pull/292 https://github.com/mitsuhiko/jinja2/commit/acb672b6a179567632e032f547582f30fa2f4aa7 http://seclists.org/oss-sec/2014/q1/73 https://github.com/mitsuhiko/jinja2/pull/296 http://secunia.com/advisories/60738 http://www.gentoo.org/security/en/glsa/glsa-201408-13.xml http://secunia.com/advisories/56328 https://usn.ubuntu.com/2301-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2014-0012

CVE-2014-0012

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect