Sign in Free account Free scan

pocoo records

4 published records for vendor pocoo.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

19
21

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-264 Permissions, Privileges, and Access Controls2
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
CWE-94 Improper Control of Generation of Code ('Code Injection')1

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
52Plan	CVE-2019-8341Proof of concept	An issue was discovered in Jinja2 2.10.pocoo · jinja2 · CWE-94 pre-auth RCE SSTI	Critical9.8	—	43.8%	Feb 15, 2019
31Monitor	CVE-2021-42771No exploit	Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directorypocoo · babel · CWE-22 Path traversal	High7.8	—	0.7%	Oct 20, 2021
17Monitor	CVE-2014-0012No exploit	FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-cpocoo · jinja2 · CWE-264 Local privilege escalation	Medium4.4	—	0.4%	May 19, 2014
17Monitor	CVE-2014-1402No exploit	The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows pocoo · jinja2 · CWE-264 Local privilege escalation	Medium4.4	—	0.3%	May 19, 2014

CVE-2019-8341
52Plan
An issue was discovered in Jinja2 2.10.
CriticalCVSS 9.8Proof of conceptEPSS 43%
- pre-auth RCE
- SSTI
pocoo · jinja2Feb 15, 2019
CVE-2021-42771
31Monitor
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory
HighCVSS 7.8No exploitEPSS 0%
- Path traversal
pocoo · babelOct 20, 2021
CVE-2014-0012
17Monitor
FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-c
MediumCVSS 4.4No exploitEPSS 0%
- Local privilege escalation
pocoo · jinja2May 19, 2014
CVE-2014-1402
17Monitor
The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows
MediumCVSS 4.4No exploitEPSS 0%
- Local privilege escalation
pocoo · jinja2May 19, 2014