Lucene search
+L

4 matches found

OSV
OSV
•added 2026/07/06 8:03 a.m.•21 views

PYSEC-2026-794 Cobbler is vulnerable to code injection

templateapi.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a...

8.5CVSS6.8AI score0.03355EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2023/02/15 5:58 a.m.•8 views

SUSE CVE-2010-2235

templateapi.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a...

8.5CVSS7.8AI score0.03355EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/05/17 5:45 a.m.•50 views

Cobbler is vulnerable to code injection

templateapi.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a...

8.5CVSS5.6AI score0.03355EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/12/09 12:00 a.m.•5 views

CVE-2010-2235: Improper Control of Generation of Code

templateapi.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a...

8.5CVSS6.6AI score0.03355EPSS
SaveExploits0References2
Rows per page
Query Builder