CVE-2021-40323

CRITICAL CVSS: 9.8 Published: 2021-10-04 Modified: 2026-06-17

Description

Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.

Affected Platforms

Cobbler Project Cobbler

Weakness Type

CWE-94

References