PT-2014-3433 · Pallets+2 · Jinja2+2

Thoger · Publicado 2014-05-19 · Atualizado 2024-06-15 · CVE-2014-0012

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Média

Vetor base

AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Jinja2 version 2.7.2 Jinja2 versions prior to 2.7.2

Description The FileSystemBytecodeCache in Jinja2 does not properly create temporary directories, allowing local users to gain privileges by pre-creating a temporary directory with a user's uid. This issue exists due to an incomplete fix for a previous problem.

Recommendations For Jinja2 version 2.7.2, update to a version that properly fixes the temporary directory creation issue. For Jinja2 versions prior to 2.7.2, update to version 2.7.2 or later to ensure proper temporary directory creation. As a temporary workaround, consider restricting access to the FileSystemBytecodeCache to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-377

CWE-264

Identificadores relacionados

ALT-PU-2020-3106

ALT-PU-2024-3036

CVE-2014-0012

GHSA-FQH9-2QGG-H84H

OPENSUSE-SU-2016_2465-1

OPENSUSE-SU-2019:0244-1

OPENSUSE-SU-2024:10129-1

OPENSUSE-SU-2024:11208-1

OPENSUSE-SU-2024:13930-1

PYSEC-2014-82

SUSE-FU-2022:0444-1

SUSE-FU-2022:0445-1

SUSE-SU-2015:1336-1

USN-2301-1

Produtos afetados

Alt Linux

Jinja2

Suse

Referências · 51

• 🔥 https://github.com/mitsuhiko/jinja2/commit/acb672b6a179567632e032f547582f30fa2f4aa7 · Exploit
• https://github.com/mitsuhiko/jinja2/pull/292 · Nota
• https://github.com/mitsuhiko/jinja2/pull/296 · Nota
• https://github.com/pallets/jinja2 · Nota
• https://github.com/pallets/jinja2/pull/292 · Nota
• https://github.com/pallets/jinja2/pull/296 · Nota
• https://github.com/pallets/jinja/commit/acb672b6a179567632e032f547582f30fa2f4aa7 · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/jinja2/PYSEC-2014-82.yaml · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1402 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22195 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=1051421 · Nota
• https://suse.com/security/cve/CVE-2014-0012 · Nota
• https://errata.altlinux.org/ALT-PU-2020-3106 · Aviso do Fabricante
• ❌ https://github.com/JameelNabbo/Jinja2-Code-execution · Nota, Deleted
• https://exploit-db.com/exploits/46386 · Nota