Lucene search

K
osvGoogleOSV:GHSA-4VC9-4XPQ-77VM
HistoryMay 13, 2022 - 1:38 a.m.

Cobbler Arbitrary File Read

2022-05-1301:38:28
Google
osv.dev
1
cobbler
software
flaw
arbitrary file read
url vulnerability

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

34.4%

A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation.

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

34.4%