Cobbler Project

Cobbler

12 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2017-1000469

Exploit
  • EPSS 1.44%
  • Published 03.01.2018 20:29:00
  • Last modified 21.11.2024 03:04:47

Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user.

6.8

CVE-2011-4953

  • EPSS 0.71%
  • Published 27.10.2014 01:55:24
  • Last modified 12.04.2025 10:46:40

The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safe_load function, as demonstrated using Pu...