| Package | Affected versions | Patched versions |
|---|---|---|
| jinja2 | < 2.7.2 | 2.7.2 |
| jinja2 | = 2.0= 2.1= 2.1.1= 2.2= 2.2.1= 2.3= 2.3.1= 2.4= 2.4.1= 2.5= 2.5.1= 2.5.2= 2.5.3= 2.5.4= 2.5.5= 2.6= 2.7≤ 2.7.1 |
The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with __jinja2_ in /tmp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free