4.4

CVE-2014-1402

The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with __jinja2_ in /tmp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pocoo ≫ Jinja2 Version <= 2.7.1
Pocoo ≫ Jinja2 Version2.0 Update-
Pocoo ≫ Jinja2 Version2.0 Updaterc1
Pocoo ≫ Jinja2 Version2.1
Pocoo ≫ Jinja2 Version2.1.1
Pocoo ≫ Jinja2 Version2.2
Pocoo ≫ Jinja2 Version2.2.1
Pocoo ≫ Jinja2 Version2.3
Pocoo ≫ Jinja2 Version2.3.1
Pocoo ≫ Jinja2 Version2.4
Pocoo ≫ Jinja2 Version2.4.1
Pocoo ≫ Jinja2 Version2.5
Pocoo ≫ Jinja2 Version2.5.1
Pocoo ≫ Jinja2 Version2.5.2
Pocoo ≫ Jinja2 Version2.5.3
Pocoo ≫ Jinja2 Version2.5.4
Pocoo ≫ Jinja2 Version2.5.5
Pocoo ≫ Jinja2 Version2.6
Pocoo ≫ Jinja2 Version2.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.1% 0.272
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.4 3.4 6.4
AV:L/AC:M/Au:N/C:P/I:P/A:P