CVE-2021-40324

Cobbler before 3.3.0 allows arbitrary file write operations via uploadlogdata...

PYSEC-2021-374

Cobbler before 3.3.0 allows arbitrary file write operations via uploadlogdata...

CVE-2021-40324

A flaw was found in cobbler. The flaw lies in cobblerd's anamon support, specifically the uploadlogdata XMLRPC function. An anamonenabled setting, if enabled, accepts unsanitized user-supplied parameters. This flaw allows an attacker to write arbitrary files to the system. The highest threat from...