| Package | Affected versions | Patched versions |
|---|---|---|
| jinja2 | < 2.7.2< 2.7.3 | 2.7.22.7.3 |
| jinja2 | = 2.7.2 |
FileSystemBytecodeCache in Jinja2 prior to version 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free