CVE-2018-1000225 Cobbler XSS Vulnerability

What is CVE-2018-1000225?

CVE-2018-1000225 is a medium-severity cross-site scripting vulnerability in n/a, published on 20 Aug 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting (XSS) vulnerability in cobbler-web that can result in Privilege escalation to admin.. This attack appear to be exploitable via "network connectivity". Sending unauthenticated JavaScript payload to the Cobbler XMLRPC API (/cobbler_api).

Weakness: CWE-79

Which versions are affected by CVE-2018-1000225?

3 open source packages ship an affected version, including cobbler. It affects 1 product.

Products include Cobblerd Cobbler.

How do I fix CVE-2018-1000225?

Apply the vendor's patch.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2018-1000225 being exploited?

There is no known exploitation of CVE-2018-1000225 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2018-1000226 Cobbler Improper Validation of Security Tokens Critical 9.8
• CVE-2011-4952 Cobbler Web Interface Lacks CSRF Protection High 8.8
• CVE-2011-4954 Privilege escalation in cobbler High 7.8
• CVE-2014-3225 Cobbler Path Traversal vulnerability Medium 4.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-q9g5-98pm-w6q7, PYSEC-2026-796, UBUNTU-CVE-2018-1000225.