[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpHAgadia_r-i3HIKgOs7JpW3sowUYCrsaWDHCWILonA":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":82,"topProductsByCves":83,"seoMetadata":85,"meta":94},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":19},5762,"cobbler_project",1,11,0,103,"2022-03-11","c",[16],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},27922,"cobbler","Cobbler_project is a technology vendor with 1 tracked product and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[21,30,36,42,47,52,60,64,70,76],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":29},"CVE-2021-40323","Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.","2021-10-04",9.8,"v3.1","Critical",false,0.86829,{"cveId":31,"description":32,"publishedDate":24,"cvssScore":33,"cvssVersion":26,"severity":34,"isKev":28,"epssScore":35},"CVE-2021-40324","Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.",7.5,"High",0.68635,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":25,"cvssVersion":40,"severity":27,"isKev":28,"epssScore":41},"CVE-2018-10931","It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler, upload files to arbitrary location in the context of the daemon.","2018-08-09","v3.0",0.68083,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":25,"cvssVersion":40,"severity":27,"isKev":28,"epssScore":46},"CVE-2017-1000469","Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the \"add repo\" component resulting in arbitrary code execution as root user.","2018-01-03",0.05556,{"cveId":48,"description":49,"publishedDate":13,"cvssScore":50,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":51},"CVE-2022-0860","Improper Authorization in GitHub repository cobbler\u002Fcobbler prior to 3.3.2.",9.1,0.02256,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":57,"severity":58,"isKev":28,"epssScore":59},"CVE-2011-4953","The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safe_load function, as demonstrated using Puppet.","2014-10-27",6.8,"v2","Medium",0.02192,{"cveId":61,"description":62,"publishedDate":24,"cvssScore":33,"cvssVersion":26,"severity":34,"isKev":28,"epssScore":63},"CVE-2021-40325","Cobbler before 3.3.0 allows authorization bypass for modification of settings.",0.01406,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":26,"severity":58,"isKev":28,"epssScore":69},"CVE-2021-45081","An issue was discovered in Cobbler through 3.3.1. Routines in several files use the HTTP protocol instead of the more secure HTTPS.","2022-02-20",5.9,0.01052,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":40,"severity":58,"isKev":28,"epssScore":75},"CVE-2016-9605","A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation.","2018-08-22",6.1,0.00806,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":26,"severity":34,"isKev":28,"epssScore":81},"CVE-2021-45082","An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the \"#from MODULE import\" substring. (Only lines beginning with #import are blocked.)","2022-02-19",7.8,0.00495,[],[84],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":86,"metaDescription":87,"keywords":88,"structuredData":89},"Cobbler_project - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Cobbler_project covering 1 product with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Cobbler_project vulnerabilities, Cobbler_project security, Cobbler_project CVE, Cobbler_project threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":90,"@type":91,"name":92,"description":87,"url":93},"https:\u002F\u002Fschema.org","Organization","Cobbler_project","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcobbler_project",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":95,"apiVersion":96},"2026-10-17T16:54:23.338Z","3.0"]