漏洞描述
Cobbler before 3.3.0 allows log poisoning and resultant remote code execution via an XMLRPC method.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
github.comhttps://github.com/cobbler/cobbler/releases/tag/v3.3.0↗github.comhttps://github.com/cobbler/cobbler/issues/2795↗tnpitsecurity.comhttps://tnpitsecurity.com/blog/cobbler-multiple-vulnerabilities/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2021-40323↗github.comhttps://github.com/cobbler/cobbler/commit/d8f60bbf14a838c8c8a1dba98086b223e35fe70a↗