4.4

CVE-2014-1402

The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with __jinja2_ in /tmp.

Data is provided by the National Vulnerability Database (NVD)
Pocoo ≫ Jinja2 Version <= 2.7.1
Pocoo ≫ Jinja2 Version2.0 Update-
Pocoo ≫ Jinja2 Version2.0 Updaterc1
Pocoo ≫ Jinja2 Version2.1
Pocoo ≫ Jinja2 Version2.1.1
Pocoo ≫ Jinja2 Version2.2
Pocoo ≫ Jinja2 Version2.2.1
Pocoo ≫ Jinja2 Version2.3
Pocoo ≫ Jinja2 Version2.3.1
Pocoo ≫ Jinja2 Version2.4
Pocoo ≫ Jinja2 Version2.4.1
Pocoo ≫ Jinja2 Version2.5
Pocoo ≫ Jinja2 Version2.5.1
Pocoo ≫ Jinja2 Version2.5.2
Pocoo ≫ Jinja2 Version2.5.3
Pocoo ≫ Jinja2 Version2.5.4
Pocoo ≫ Jinja2 Version2.5.5
Pocoo ≫ Jinja2 Version2.6
Pocoo ≫ Jinja2 Version2.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.164
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.4 3.4 6.4
AV:L/AC:M/Au:N/C:P/I:P/A:P