VDB

DEBIAN-CVE-2014-0012

DEBIAN-CVE-2014-0012 PUBLISHED

FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402.

Affected Products

VendorProductVersions
Debian:12jinja20, 0, 0
Debian:11jinja20, 0, 0
Debian:13jinja20, 0, 0
Debian:14jinja20, 0, 0

Timeline

  • May 19, 2014 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›