Lucene search

K
osvGoogleOSV:GHSA-6CM4-GM85-972C
HistoryFeb 20, 2022 - 12:00 a.m.

Command Injection in Cobbler

2022-02-2000:00:35
Google
osv.dev
14

0.001 Low

EPSS

Percentile

35.5%

An issue was discovered in Cobbler through 3.3.0. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the “#from MODULE import” substring. (Only lines beginning with #import are blocked.)