Lucene search

K
osvGoogleOSV:PYSEC-2022-37
HistoryFeb 19, 2022 - 12:15 a.m.

PYSEC-2022-37

2022-02-1900:15:00
Google
osv.dev
27

0.001 Low

EPSS

Percentile

35.5%

An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the “#from MODULE import” substring. (Only lines beginning with #import are blocked.)