Description (CNA)
A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The cobbler Project / cobbler | affected 2.6.11-1 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.