Search for packages
| purl | pkg:pypi/cobbler@3.3.1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2014-3225
|
Local File inclusion A local file inclusion is possible by specifying full path to any desired file in the Kickstart … | There are no reported fixed by versions. |
|
PYSEC-2022-177
Aliases: CVE-2022-0860 GHSA-mcg6-h362-cmq5 |
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2. |
Vulnerable |
|
PYSEC-2022-177
Aliases: CVE-2022-0860 GHSA-mcg6-h362-cmq5 |
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2. |
Vulnerable |
|
GHSA-m26c-fcgh-cp6h
Aliases: CVE-2024-47533 |
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes ### Summary utils.get_shared_secret() always returns … |
Vulnerable |
|
PYSEC-2026-316
Aliases: CVE-2024-47533 GHSA-m26c-fcgh-cp6h |
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes ### Summary utils.get_shared_secret() always returns … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
PYSEC-2022-37
|
An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to … |
CVE-2021-45082
GHSA-6cm4-gm85-972c |
|
PYSEC-2022-38
|
An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain some … |
CVE-2021-45083
GHSA-5946-mpw5-pqxx |
|
PYSEC-2022-37
|
An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to … |
CVE-2021-45082
GHSA-6cm4-gm85-972c |
|
PYSEC-2022-38
|
An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain some … |
CVE-2021-45083
GHSA-5946-mpw5-pqxx |