Cobblerd
Cobblerd Cobbler: vulnerabilidades y CVE
Cobblerd Cobbler tiene 5 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2011-4954 | Alta (7.8) | 0.34% | — | 19 nov 2019 | cobbler has local privilege escalation via the use of insecure location for PYTHON_EGG_CACHE |
| CVE-2011-4952 | Alta (8.8) | 0.64% | — | 19 nov 2019 | cobbler: Web interface lacks CSRF protection when using Django framework |
| CVE-2018-1000226 | Crítica (9.8) | 13% | — | 20 ago 2018 | Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC… |
| CVE-2018-1000225 | Media (6.1) | 1.3% | — | 20 ago 2018 | Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting (XSS) vulnerability in… |
| CVE-2014-3225 | Media (4) | 8.9% | — | 14 may 2014 | Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile. |