Skip to content
OpenAdvisories

Package · PyPI

cobbler

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2016-9605

    Cobbler Arbitrary File Read

    A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installati…

    The cobbler Project cobbler cobbler PyPI
  • Medium 6.1
    CVE-2018-1000225

    Cobbler XSS Vulnerability

    Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting (XSS) vulnerability in cobbler-web that can result in Privilege esc…

    cobbler cobbler Ubuntu PyPI
  • Medium —
    CVE-2011-4953

    Cobbler vulnerable to code injection via unsafe YAML loading

    The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safe_load function, as demonstrated using Puppet.

    cobbler PyPI
  • Medium —
    CVE-2014-3225 Public exploit

    Cobbler Path Traversal vulnerability

    Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile.

    cobbler cobbler Ubuntu PyPI