Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/cobbler@3.3.2
purl pkg:pypi/cobbler@3.3.2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2014-3225

Local File inclusion A local file inclusion is possible by specifying full path to any desired file in the Kickstart … There are no reported fixed by versions.
GHSA-m26c-fcgh-cp6h
Aliases:
CVE-2024-47533
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes ### Summary utils.get_shared_secret() always returns …
3.3.7
Vulnerable
PYSEC-2026-316
Aliases:
CVE-2024-47533
GHSA-m26c-fcgh-cp6h
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes ### Summary utils.get_shared_secret() always returns …
3.2.3
Vulnerable
3.3.7
Vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
PYSEC-2022-177
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2. CVE-2022-0860
GHSA-mcg6-h362-cmq5
PYSEC-2022-177
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2. CVE-2022-0860
GHSA-mcg6-h362-cmq5