CVE-2019-8341

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 45%

from disclosure to weapon0 days

Published on NVDFeb 15

1st PoCFeb 15

exploitation probability

45%top 1% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing

Affected products

n/a · n/a

public PoCs found — 3

githubgithub.com/adindrabkin/llama_facts★ 0 cve_referencewww.exploit-db.com/exploits/46386/unverified exploitdbwww.exploit-db.com/exploits/46386unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00030.html http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00064.html https://bugzilla.redhat.com/show_bug.cgi?id=1677653 https://bugzilla.suse.com/show_bug.cgi?id=1125815 https://github.com/JameelNabbo/Jinja2-Code-execution https://www.exploit-db.com/exploits/46386/