cobbler vulnerabilities (PyPI)
18 vulnerabilities.
-
cobblerPyPI Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes 9.8 Critical -
cobblerPyPI Improper Authorization in cobbler/cobbler 8.2 High -
cobblerPyPI Command Injection in Cobbler 7.8 High -
cobblerPyPI Incorrect Default Permissions in Cobbler 7.1 High -
cobblerPyPI Cobbler before 3.3.0 allows authorization bypass for modification of settings. 7.5 High -
cobblerPyPI Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. 7.5 High -
cobblerPyPI Cobbler before 3.3.0 allows log poisoning 9.8 Critical -
cobblerPyPI Cobbler Web Interface Lacks CSRF Protection 8.8 High -
cobblerPyPI Cobbler Improper Validation of Security Tokens 9.8 Critical -
cobblerPyPI Cobbler XSS Vulnerability 6.1 Medium -
cobblerPyPI Cobbler has Exposed Dangerous Method or Function 9.8 Critical -
cobblerPyPI Cobbler vulnerable to arbitrary code execution 9.8 Critical -
cobblerPyPI Cobbler Arbitrary File Read 6.1 Medium -
cobblerPyPI Cobbler vulnerable to code injection via unsafe YAML loading 6.8 Medium -
cobblerPyPI Cobbler Path Traversal vulnerability 4.0 Medium -
cobblerPyPI Cobbler subject to Command Injection 7.5 High -
cobblerPyPI Cobbler is vulnerable to code injection 8.5 High -
cobblerPyPI Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability 9.0 High