CO
Product
Cobbler
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 2Low 0
Watch
Add Cobbler to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-40323 | 9.8 | Oct 4 | Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection Affected: through 3.3.0 |
| CVE-2018-10931 | 9.8 | Aug 9 | It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC Affected: 2.6.0 through 2.6.11 |
| CVE-2017-1000469 | 9.8 | Jan 3 | Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user Affected: through 2.8.2 |
| CVE-2022-0860 | 9.1 | Mar 11 | Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2 Affected: before 3.3.2 |
| CVE-2021-45082 | 7.8 | Feb 19 | An issue was discovered in Cobbler before 3.3.1 Affected: before 3.3.1 |
| CVE-2021-40325 | 7.5 | Oct 4 | Cobbler before 3.3.0 allows authorization bypass for modification of settings Affected: through 3.3.0 |
| CVE-2021-40324 | 7.5 | Oct 4 | Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data Affected: through 3.3.0 |
| CVE-2021-45083 | 7.1 | Feb 20 | An issue was discovered in Cobbler before 3.3.1 Affected: before 3.3.1 |
| CVE-2016-9605 | 6.1 | Aug 22 | A flaw was found in cobbler software component version 2.6.11-1 Affected: 2.6.11-1 |
| CVE-2021-45081 | 5.9 | Feb 20 | An issue was discovered in Cobbler through 3.3.1 Affected: through 3.3.1 |
| CVE-2011-4953 | – | Oct 27 | The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load… Affected: through 2.2.1 |
Showing 11