—
PYSEC-2021-373
Quick fix
PYSEC-2021-373 — cobbler: upgrade to the fixed version with the command below.
pip install --upgrade 'cobbler>=d8f60bbf14a838c8c8a1dba98086b223e35fe70a'Details
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/cobbler
Introduced in:
0Fixed in: d8f60bbf14a838c8c8a1dba98086b223e35fe70aFix
pip install --upgrade 'cobbler>=d8f60bbf14a838c8c8a1dba98086b223e35fe70a'