CVE-2021-40323 Cobbler before 3.3.0 allows log poisoning
Attackers can achieve remote code execution in Cobbler via log poisoning and template injection through an XMLRPC method.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-40323?
CVE-2021-40323 is a critical code injection vulnerability in n/a, published on 4 Oct 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.
Weakness: CWE-94
Which versions are affected by CVE-2021-40323?
3 open source packages ship an affected version, including cobbler. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
cobbler PyPI | All versions | 3.3.0 |
cobbler PyPI | All versions | 3.3.0 |
cobbler PyPI | All versions | 3.3.0 |
Products include Cobbler Project Cobbler.
How do I fix CVE-2021-40323?
Upgrade cobbler to 3.3.0 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2021-40323 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-40323 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in n/a
- CVE-2018-10931 Cobbler has Exposed Dangerous Method or Function
- CVE-2017-1000469 Cobbler vulnerable to arbitrary code execution
- CVE-2022-0860 Improper Authorization in cobbler/cobbler
- CVE-2021-45082 Command Injection in Cobbler
- CVE-2021-40324 Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
Sources
Also known as GHSA-cpqf-3c3r-c9g2, PYSEC-2021-373, UBUNTU-CVE-2021-40323.