CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.4. See the original NVD description below for full technical details.
CVE
CVE-2014-1402
Severity
MEDIUM
CVSS
4.4
EPSS
0.37%
Original NVD Description
The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with __jinja2_ in /tmp.