Executive brief
Cobbler before 3.3.0 allows authorization bypass for modification of settings.
Affected products
- PyPI cobbler
Junglewise Threat Intelligence
CVE-2021-40325: PYSEC-2021-375 - Cobbler before 3.3.0 allows authorization bypass for modification of settings.
CVE-2021-40325 · Severity: low · CVSS 3.1 · Published 2021-10-04
Technologies: cobbler (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-794 - Cobbler is vulnerable to code injection
- PYSEC-2026-792 - Cobbler subject to Command Injection
- PYSEC-2026-793 - Cobbler vulnerable to code injection via unsafe YAML loading
- PYSEC-2026-795 - Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability
- PYSEC-2026-797 - Cobbler Path Traversal vulnerability