Lucene search

K
osvGoogleOSV:GHSA-96HW-V598-JVGH
HistoryMay 14, 2022 - 3:49 a.m.

Cobbler vulnerable to arbitrary code execution

2022-05-1403:49:57
Google
osv.dev
3

7.8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.9%

Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the “add repo” component resulting in arbitrary code execution as root user.

CPENameOperatorVersion
cobblereq0.6.3-2

7.8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.9%