CVE-2021-40324
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
Summary
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
Affected packages
PyPI
cobbler
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web github.com
- web github.com
- web github.com