CVE-2014-1402

Description

The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with __jinja2_ in /tmp.

Risk Information

Base Score

8.4

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.096

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2014-0012,CVE-2014-1402 are fixed in Python-jinja2 2.7.2	Windows
(RHSA-2014:0747) Moderate: python-jinja2 security update python-jinja2-2.2.1-2.el6_5.i686.rpm	Linux
(RHSA-2014:0747) Moderate: python-jinja2 security update python-jinja2-2.2.1-2.el6_5.x86_64.rpm	Linux
Vulnerabilities CVE-2014-0012,CVE-2014-1402 are fixed in Python-jinja2 for linux 2.7.2	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234