Files
CVEs-PoC/2014/CVE-2014-0012.md
T
2025-09-29 21:09:30 +02:00

804 B

CVE-2014-0012

Description

FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402.

POC

Reference

Github