CVE-2014-0012

Name of the Vulnerable Software and Affected Versions Jinja2 version 2.7.2 Jinja2 versions prior to 2.7.2

Description The FileSystemBytecodeCache in Jinja2 does not properly create temporary directories, allowing local users to gain privileges by pre-creating a temporary directory with a user's uid. This issue exists due to an incomplete fix for a previous problem.

Recommendations For Jinja2 version 2.7.2, update to a version that properly fixes the temporary directory creation issue. For Jinja2 versions prior to 2.7.2, update to version 2.7.2 or later to ensure proper temporary directory creation. As a temporary workaround, consider restricting access to the FileSystemBytecodeCache to minimize the risk of exploitation.