CVEs-PoC/2016/CVE-2016-10745.md

CVE-2016-10745

Description

In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.

POC

Reference

• https://usn.ubuntu.com/4011-1/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/JinBean/CVE-Extension
• https://github.com/LoricAndre/OSV_Commits_Analysis
• https://github.com/arvion-ai/test-vulnerable-python2
• https://github.com/seal-community/patches