4 matches found
Cobbler Web Interface Lacks CSRF Protection
cobbler: Web interface lacks CSRF protection when using Django framework...
8.8CVSS7.9AI score0.00635EPSS
SaveExploits0References10Affected Software1
EUVD-2022-5762
Malicious code in bioql PyPI...
4CVSS8.4AI score0.08881EPSS
SaveExploits3References15
CVE-2014-3225
Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile...
4CVSS8.8AI score0.08881EPSS
SaveExploits3References9
UBUNTU-CVE-2014-3225
Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile...
4CVSS7.4AI score0.08881EPSS
SaveExploits3References4
20