Lucene search

K
osvGoogleOSV:PYSEC-2021-373
HistoryOct 04, 2021 - 6:15 a.m.

PYSEC-2021-373

2021-10-0406:15:00
Google
osv.dev
14

0.037 Low

EPSS

Percentile

91.8%

Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.