CVE-2021-45082 vulnerability in Cobblerproject and Other Products
Published on February 19, 2022
An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.)
Products Associated with CVE-2021-45082
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-45082 are published in these products:
Exploit Probability
EPSS
0.04%
Percentile
13.09%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.