mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-24 20:04:01 +02:00
19 lines
785 B
Markdown
19 lines
785 B
Markdown
### [CVE-2014-0012](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0012)
|
|

|
|

|
|

|
|
|
|
### Description
|
|
|
|
FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
No PoCs from references.
|
|
|
|
#### Github
|
|
- https://github.com/ARPSyndicate/cvemon
|
|
- https://github.com/LoricAndre/OSV_Commits_Analysis
|
|
|