Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-22195

21
FAUCET Score

CVE-2024-22195 is a Cross-Site Scripting (XSS) vulnerability affecting the Jinja templating engine, specifically through the abuse of its xmlattr filter. This allows attackers to inject arbitrary HTML attributes, bypassing auto-escaping and potentially leading to XSS. With a CVSS score of 6.1 (Medium), it requires user interaction (UI:R) but can be exploited remotely (AV:N) with low attack complexity (AC:L), potentially impacting confidentiality and integrity. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion, indicating a low immediate threat level.

Impacted Technologies

VendorProductVersion(s)CPE
< 3.1.3CPE matchmatch criteria
cpe:2.3:a:palletsprojects:jinja:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.4MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
2.8
Impact Score
2.5
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.89%
Probability of exploitation in next 30 days
EPSS Percentile
55.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0089 is in the 66th percentile among its peer group of 26,236 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (46)

microsoftpatch availablevia msrc
Product: cbl2 nodejs18 18.20.3-5 on CBL Mariner 2.0Fixed in: 18.20.3-3
microsoftpatch availablevia msrc
Product: azl3 nodejs 20.14.0-8 on Azure Linux 3.0Fixed in: 20.14.0-1
microsoftpatch availablevia msrc
Product: azl3 nodejs 20.14.0-1 on Azure Linux 3.0Fixed in: 20.14.0-1
microsoftpatch availablevia msrc
Product: azl3 python-jinja2 3.1.2-3 on Azure Linux 3.0Fixed in: 3.1.2-2
microsoftpatch availablevia msrc
Product: azl3 python-jinja2 3.1.2-2 on Azure Linux 3.0Fixed in: 3.1.2-2
microsoftpatch availablevia msrc
Product: cbl2 python-jinja2 3.0.3-7 on CBL Mariner 2.0Fixed in: 3.0.3-3
microsoftpatch availablevia msrc
Product: cbl2 python-jinja2 3.0.3-3 on CBL Mariner 2.0Fixed in: 3.0.3-3
microsoftpatch availablevia msrc
Product: 17280-16823Fixed in: 18.20.3-3
microsoftpatch availablevia msrc
Product: 19850-17086Fixed in: 18.20.3-3
microsoftpatch availablevia msrc
Product: 19397-17086Fixed in: 18.20.3-3
microsoftpatch availablevia msrc
Product: 17456-16823Fixed in: 3.0.3-3
microsoftpatch availablevia msrc
Product: 19846-17086Fixed in: 3.0.3-3
microsoftpatch availablevia msrc
Product: 17499-17084Fixed in: 3.1.2-2
microsoftpatch availablevia msrc
Product: 19400-17084Fixed in: 3.1.2-2
microsoftpatch availablevia msrc
Product: 16990-17084Fixed in: 20.14.0-1
microsoftpatch availablevia msrc
Product: 19608-17084Fixed in: 20.14.0-1
microsoftpatch availablevia msrc
Product: cbl2 nodejs18 18.20.3-3 on CBL Mariner 2.0Fixed in: 18.20.3-3
pippatch availablevia ghsa
Product: jinja2Fixed in: 3.1.3
redhatpatch availablevia redhat_api
Product: Red Hat OpenStack Platform 17.1 for RHEL 9Fixed in: openstack-ansible-core-0:2.14.2-4.3.el9ost
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Satellite 6.14 for RHEL 8Fixed in: python-jinja2-0:3.1.3-0.1.el8pc
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Satellite 6.15 for RHEL 8Fixed in: python-jinja2-0:3.1.3-1.el8pc
View patch
redhatpatch availablevia redhat_api
Product: RHUI 4 for RHEL 8Fixed in: python-jinja2-0:3.1.3-1.el8ui
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ceph Storage 7.1Fixed in: rhceph/rhceph-haproxy-rhel9:2.4.22-21
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ansible Automation Platform 2.4 for RHEL 8Fixed in: automation-controller-0:4.5.5-2.el8ap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ansible Automation Platform 2.4 for RHEL 9Fixed in: python-jinja2-0:3.1.3-1.el9ap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ansible Automation Platform 2.4 for RHEL 9Fixed in: automation-controller-0:4.5.5-2.el9ap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ceph Storage 7.1Fixed in: rhceph/ceph-nvmeof-cli-rhel9:1.2.13-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ceph Storage 7.1Fixed in: rhceph/ceph-nvmeof-rhel9:1.2.13-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ceph Storage 7.1Fixed in: rhceph/grafana-rhel9:10.4.0-9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ceph Storage 7.1Fixed in: rhceph/keepalived-rhel9:2.2.8-20
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ceph Storage 7.1Fixed in: rhceph/rhceph-7-rhel9:7-385
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ansible Automation Platform 2.4 for RHEL 8Fixed in: python3x-jinja2-0:3.1.3-1.el8ap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ceph Storage 7.1Fixed in: rhceph/rhceph-promtail-rhel9:v2.4.0-28
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ceph Storage 7.1Fixed in: rhceph/snmp-notifier-rhel9:1.2.1-67
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: fence-agents-0:4.2.1-129.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: python27:2.7-8100020240208011952.5f0f67de
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: python-jinja2-0:2.10.1-4.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: fence-agents-0:4.10.0-62.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: python-jinja2-0:2.11.3-5.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: fence-agents-0:4.10.0-20.el9_0.11
View patch
redhatno patchvia redhat_api
Product: Red Hat Satellite 6Fixed in: satellite:el8/python-jinja2
redhatno patchvia redhat_api
Product: Red Hat Satellite 6Fixed in: satellite-capsule:el8/python-jinja2
redhatno patchvia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Software CollectionsFixed in: rh-python38-python-jinja2
redhatend of lifevia redhat_api
Product: Red Hat Satellite 6Fixed in: tfm-pulpcore-python-jinja2
redhatend of lifevia redhat_api
Product: Red Hat Ceph Storage 6Fixed in: cephadm-ansible

Vendor Advisories (3)

pipGHSA-h5c8-rqwp-cp95medium

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

Jan 11, 2024
redhatCVE-2024-22195Moderate

jinja2: HTML attribute injection when passing user input as keys to xmlattr filter

Jan 11, 2024
microsoft2024-Jan/CVE-2024-22195Moderate

Jinja vulnerable to Cross-Site Scripting (XSS)

Jan 9, 2024

References

lists.debian.org / debian-lts-announce/2024/12/msg00009.html
github.com / pallets/jinja/releases/tag/3.1.3
Release Notes
github.com / pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95
Third Party Advisory
lists.debian.org / debian-lts-announce/2024/01/msg00010.html
lists.fedoraproject.org / archives/list/[email protected]/message/5XCWZD464AJJJUBOO7CMPXQ4ROBC6JX2
lists.fedoraproject.org / archives/list/[email protected]/message/DELCVUUYX75I5K4Q5WMJG4MUZJA6VAIP
lists.fedoraproject.org / archives/list/[email protected]/message/O7YWRBX6JQCWC2XXCTZ55C7DPMGICCN3