CVE-2016-10745

python-jinja2: Sandbox escape due to information disclosure via str.format

Published Apr 8, 2019 CVSS 3.0 · 8.6 High EPSS 3.5% KEV · Not listed
Description
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2019-0069 In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
Github GHSA Github GHSA GHSA-hj2j-77xm-mc5v Jinja2 sandbox escape vulnerability
Ubuntu USN Ubuntu USN USN-4011-1 Jinja2 vulnerabilities
Ubuntu USN Ubuntu USN USN-4011-2 Jinja2 vulnerabilities
History

No history.