oss-sec mailing list archives

CVE Request - Local File inclusion in Cobbler


From: Dolev Farhi <D.Farhi () F5 com>
Date: Thu, 8 May 2014 06:43:38 +0000

hi,

as reported in https://github.com/cobbler/cobbler/issues/939

A local file inclusion is possible by specifying full path to any desired file in the Kickstart value in Cobbler's 
WebUI in all versions.

Cobbler ease setup of network installation environments.

After informing cobbler team, a patch will be released in the next version of Cobbler to address this issue

Can a CVE please be assign to this?

tx






Current thread: