CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-10745

In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 76.5%

CVSS Severity

CVSS v3 Score 8.6

CVSS v2 Score 5.0

References

Products affected by CVE-2016-10745

Palletsprojects » Jinja » Version: 2.0

cpe:2.3:a:palletsprojects:jinja:2.0
Palletsprojects » Jinja » Version: 2.1

cpe:2.3:a:palletsprojects:jinja:2.1
Palletsprojects » Jinja » Version: 2.1.1

cpe:2.3:a:palletsprojects:jinja:2.1.1
Palletsprojects » Jinja » Version: 2.2

cpe:2.3:a:palletsprojects:jinja:2.2
Palletsprojects » Jinja » Version: 2.2.1

cpe:2.3:a:palletsprojects:jinja:2.2.1
Palletsprojects » Jinja » Version: 2.3

cpe:2.3:a:palletsprojects:jinja:2.3
Palletsprojects » Jinja » Version: 2.3.1

cpe:2.3:a:palletsprojects:jinja:2.3.1
Palletsprojects » Jinja » Version: 2.4

cpe:2.3:a:palletsprojects:jinja:2.4
Palletsprojects » Jinja » Version: 2.4.1

cpe:2.3:a:palletsprojects:jinja:2.4.1
Palletsprojects » Jinja » Version: 2.5

cpe:2.3:a:palletsprojects:jinja:2.5
Palletsprojects » Jinja » Version: 2.5.1

cpe:2.3:a:palletsprojects:jinja:2.5.1
Palletsprojects » Jinja » Version: 2.5.3

cpe:2.3:a:palletsprojects:jinja:2.5.3
Palletsprojects » Jinja » Version: 2.5.4

cpe:2.3:a:palletsprojects:jinja:2.5.4
Palletsprojects » Jinja » Version: 2.5.5

cpe:2.3:a:palletsprojects:jinja:2.5.5
Palletsprojects » Jinja » Version: 2.6

cpe:2.3:a:palletsprojects:jinja:2.6
Palletsprojects » Jinja » Version: 2.7

cpe:2.3:a:palletsprojects:jinja:2.7
Palletsprojects » Jinja » Version: 2.7.1

cpe:2.3:a:palletsprojects:jinja:2.7.1
Palletsprojects » Jinja » Version: 2.7.2

cpe:2.3:a:palletsprojects:jinja:2.7.2
Palletsprojects » Jinja » Version: 2.7.3

cpe:2.3:a:palletsprojects:jinja:2.7.3
Palletsprojects » Jinja » Version: 2.8

cpe:2.3:a:palletsprojects:jinja:2.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-10745

Products

Pricing

Contact Us