Skip to content

Vendor

pocoo vulnerabilities

3 published CVES affecting pocoo, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
1
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of pocoo alerts

Products

Latest pocoo CVEs

Newest publication first

  1. CVE-2021-42771 Directory Traversal in Babel

    Published
    HighCVSS 7.8 EPSS 0.77%

    Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.

  2. CVE-2014-0012 Insecure Temporary File in Jinja2

    Published
    MediumCVSS 4.4 EPSS 0.43%

    FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402.

  3. CVE-2014-1402 Incorrect Privilege Assignment in Jinja2

    Published
    MediumCVSS 4.4 EPSS 0.37%

    The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with _jinja2 in /tmp.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.