CVE-2014-0012 REJECTED

FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402.

EPSS 0.10% · 27.9th percentile

Risk Scores

EPSS Score
0.10%
27.9th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSjinja20, 2.7-3, 2.7.1-1

Timeline

References

Open in Interactive Console →