Show filters
13 Total Results
Displaying 11-13 of 13
Sort by:
Attacker Value
Unknown
CVE-2018-18893
Disclosure Date: January 03, 2019 (last updated November 27, 2024)
Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.
0
Attacker Value
Unknown
CVE-2014-1402
Disclosure Date: May 19, 2014 (last updated October 05, 2023)
The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with __jinja2_ in /tmp.
0
Attacker Value
Unknown
CVE-2014-0012
Disclosure Date: May 19, 2014 (last updated November 08, 2023)
FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402.
0
