CVE-2021-40323
Cobbler before 3.3.0 allows log poisoning
Résumé
Cobbler before 3.3.0 allows log poisoning
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
PyPI
cobbler
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web github.com
- web github.com
- web github.com