Описание
An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.)
| Релиз | Статус | Примечание |
|---|---|---|
| esm-apps/xenial | released | 2.4.1-0ubuntu2+esm1 |
| trusty | ignored | end of standard support |
| upstream | released | 3.3.1 |
| xenial | ignored | end of standard support |
Показывать по
EPSS
4.6 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.)
An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.)
An issue was discovered in Cobbler before 3.3.1. In the templar.py fil ...
EPSS
4.6 Medium
CVSS2
7.8 High
CVSS3