CVE-2019-10906GHSA-462W-V97R-4M45PYSEC-2019-217
In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 2.10.1
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.
Timeline
- CVE published
- Record last updated
Affected versions
- n/a n/a
Version range not reported
- jinja2PyPI
fixed in 2.10.1
References 19
palletsprojects.com
lists.apache.org
- thread.html/46c055e173b52d599c648a98199972dbd6a89d2b4c4647b0500f2284@<devnull.infra.apache.org>
- thread.html/b2380d147b508bbcb90d2cad443c159e63e12555966ab4f320ee22da@<commits.airflow.apache.org>
- thread.html/f0c4a03418bcfe70c539c5dbaf99c04c98da13bfa1d3266f08564316@<commits.airflow.apache.org>
- thread.html/57673a78c4d5c870d3f21465c7e2946b9f8285c7c57e54c2ae552f02@<commits.airflow.apache.org>
- thread.html/320441dccbd9a545320f5f07306d711d4bbd31ba43dc9eebcfc602df@<devnull.infra.apache.org>
- thread.html/2b52b9c8b9d6366a4f1b407a8bde6af28d9fc73fdb3b37695fd0d9ac@<devnull.infra.apache.org>
- thread.html/7f39f01392d320dfb48e4901db68daeece62fd60ef20955966739993@<commits.airflow.apache.org>
- thread.html/09fc842ff444cd43d9d4c510756fec625ef8eb1175f14fd21de2605f@<devnull.infra.apache.org>