Поиск уязвимостей
Количество 13
Количество 13
BDU:2019-01179
Уязвимость функции from_string шаблонизатора Jinja2 для языка программирования Python, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации
ALT-PU-2019-2664
ALT-PU-2019-2664: package `python-module-jinja2` update to version 2.10.1-alt1
ALT-PU-2024-3036
ALT-PU-2024-3036: package `python3-module-jinja2` update to version 3.0.1-alt1.p10.1
CVE-2019-8341
An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing
CVE-2019-8341
An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing
CVE-2019-8341
An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing
CVE-2019-8341
An issue was discovered in Jinja2 2.10. The from_string function is pr ...
GHSA-f6pv-j8mr-w6rr
** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.
SUSE-SU-2020:3096-1
Security update for python-Jinja2
openSUSE-SU-2019:1614-1
Security update for python-Jinja2
openSUSE-SU-2019:1395-1
Security update for python-Jinja2
SUSE-SU-2019:1554-1
Security update for python-Jinja2
SUSE-SU-2019:1156-1
Security update for python-Jinja2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2019-01179 Уязвимость функции from_string шаблонизатора Jinja2 для языка программирования Python, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации | CVSS3: 8.2 | 44% Средний | больше 7 лет назад |
| ALT-PU-2019-2664 ALT-PU-2019-2664: package `python-module-jinja2` update to version 2.10.1-alt1 | CVSS3: 9.8 | около 7 лет назад | |
| ALT-PU-2024-3036 ALT-PU-2024-3036: package `python3-module-jinja2` update to version 3.0.1-alt1.p10.1 | CVSS3: 9.8 | больше 2 лет назад | |
 | CVE-2019-8341 An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing | CVSS3: 9.8 | 44% Средний | больше 7 лет назад |
 | CVE-2019-8341 An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing | CVSS3: 8.2 | 44% Средний | больше 7 лет назад |
 | CVE-2019-8341 An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing | CVSS3: 9.8 | 44% Средний | больше 7 лет назад |
| CVE-2019-8341 An issue was discovered in Jinja2 2.10. The from_string function is pr ... | CVSS3: 9.8 | 44% Средний | больше 7 лет назад |
| GHSA-f6pv-j8mr-w6rr ** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing. | CVSS3: 9.8 | 44% Средний | больше 4 лет назад |
 | SUSE-SU-2020:3096-1 Security update for python-Jinja2 | около 6 лет назад | ||
| openSUSE-SU-2019:1614-1 Security update for python-Jinja2 | больше 7 лет назад | ||
| openSUSE-SU-2019:1395-1 Security update for python-Jinja2 | больше 7 лет назад | ||
| SUSE-SU-2019:1554-1 Security update for python-Jinja2 | больше 7 лет назад | ||
| SUSE-SU-2019:1156-1 Security update for python-Jinja2 | больше 7 лет назад |
Уязвимостей на страницу