Search for packages
| purl | pkg:pypi/cobbler@0.6.3.post2 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2018-1000226
Aliases: GHSA-f88q-22g8-frcg |
Incorrect Permission Assignment for Critical Resource Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at … | There are no reported fixed by versions. |
|
CVE-2017-1000469
Aliases: GHSA-96hw-v598-jvgh |
Improper Input Validation Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component … | There are no reported fixed by versions. |
|
CVE-2014-3225
|
Local File inclusion A local file inclusion is possible by specifying full path to any desired file in the Kickstart … | There are no reported fixed by versions. |
|
PYSEC-2021-373
Aliases: CVE-2021-40323 GHSA-cpqf-3c3r-c9g2 |
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile … |
Vulnerable |
|
PYSEC-2021-374
Aliases: CVE-2021-40324 GHSA-4cfr-gjfx-fj3x |
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. |
Vulnerable |
|
PYSEC-2021-375
Aliases: CVE-2021-40325 GHSA-cr3f-r24j-3chw |
Cobbler before 3.3.0 allows authorization bypass for modification of settings. |
Vulnerable |
|
PYSEC-2022-177
Aliases: CVE-2022-0860 GHSA-mcg6-h362-cmq5 |
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2. |
Vulnerable |
|
PYSEC-2021-375
Aliases: CVE-2021-40325 GHSA-cr3f-r24j-3chw |
Cobbler before 3.3.0 allows authorization bypass for modification of settings. |
Vulnerable |
|
PYSEC-2022-177
Aliases: CVE-2022-0860 GHSA-mcg6-h362-cmq5 |
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2. |
Vulnerable |
|
PYSEC-2021-373
Aliases: CVE-2021-40323 GHSA-cpqf-3c3r-c9g2 |
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile … |
Vulnerable |
|
PYSEC-2022-37
Aliases: CVE-2021-45082 GHSA-6cm4-gm85-972c |
An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to … |
Vulnerable |
|
PYSEC-2022-38
Aliases: CVE-2021-45083 GHSA-5946-mpw5-pqxx |
An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain some … |
Vulnerable |
|
PYSEC-2021-374
Aliases: CVE-2021-40324 GHSA-4cfr-gjfx-fj3x |
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. |
Vulnerable |
|
PYSEC-2022-37
Aliases: CVE-2021-45082 GHSA-6cm4-gm85-972c |
An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to … |
Vulnerable |
|
PYSEC-2022-38
Aliases: CVE-2021-45083 GHSA-5946-mpw5-pqxx |
An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain some … |
Vulnerable |
|
PYSEC-2026-624
Aliases: CVE-2011-4952 GHSA-9fqr-pqc9-f7pj |
Cobbler Web Interface Lacks CSRF Protection cobbler: Web interface lacks CSRF protection when using Django framework | There are no reported fixed by versions. |
|
PYSEC-2026-314
Aliases: CVE-2017-1000469 GHSA-96hw-v598-jvgh |
Cobbler vulnerable to arbitrary code execution Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the … | There are no reported fixed by versions. |
|
PYSEC-2026-315
Aliases: CVE-2018-1000226 GHSA-f88q-22g8-frcg |
Cobbler Improper Validation of Security Tokens Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at … | There are no reported fixed by versions. |
|
PYSEC-2026-623
Aliases: CVE-2016-9605 GHSA-4vc9-4xpq-77vm |
Cobbler Arbitrary File Read A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter … | There are no reported fixed by versions. |
|
PYSEC-2026-794
Aliases: CVE-2010-2235 GHSA-jhm7-38xj-pvm8 |
Cobbler is vulnerable to code injection template_api.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and … | There are no reported fixed by versions. |
|
PYSEC-2026-796
Aliases: CVE-2018-1000225 GHSA-q9g5-98pm-w6q7 |
Cobbler XSS Vulnerability Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or … | There are no reported fixed by versions. |
|
PYSEC-2026-795
Aliases: CVE-2008-6954 GHSA-p8w2-f44p-fmcj |
Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated … | There are no reported fixed by versions. |
|
PYSEC-2026-793
Aliases: CVE-2011-4953 GHSA-hpj3-5p46-g87w |
Cobbler vulnerable to code injection via unsafe YAML loading The `set_mgmt_parameters` function in item.py in cobbler before 2.2.2 allows context-dependent … | There are no reported fixed by versions. |
|
PYSEC-2026-792
Aliases: CVE-2012-2395 GHSA-g34c-mg6m-xvxj |
Cobbler subject to Command Injection A Command Injection in action_power.py in Cobbler prior to v2.6.0 allows remote attackers to execute … | There are no reported fixed by versions. |
|
GHSA-96hw-v598-jvgh
Aliases: CVE-2017-1000469 |
Cobbler vulnerable to arbitrary code execution Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the … | There are no reported fixed by versions. |
|
GHSA-q9g5-98pm-w6q7
Aliases: CVE-2018-1000225 |
Cobbler XSS Vulnerability Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or … | There are no reported fixed by versions. |
|
GHSA-f88q-22g8-frcg
Aliases: CVE-2018-1000226 |
Cobbler Improper Validation of Security Tokens Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at … | There are no reported fixed by versions. |
|
GHSA-4vc9-4xpq-77vm
Aliases: CVE-2016-9605 |
Cobbler Arbitrary File Read A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter … | There are no reported fixed by versions. |