What is GHSA-q9g5-98pm-w6q7?

GHSA-q9g5-98pm-w6q7 is a security advisory published by GitHub Security Advisories with Medium severity. Cobbler XSS Vulnerability

Which CVE IDs does GHSA-q9g5-98pm-w6q7 cover?

GHSA-q9g5-98pm-w6q7 covers the following CVE IDs: CVE-2018-1000225. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-q9g5-98pm-w6q7?

GHSA-q9g5-98pm-w6q7 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-q9g5-98pm-w6q7?

GHSA-q9g5-98pm-w6q7 affects 1 product, including: pip/cobbler:\u003c= 2.6.11.

GHSA-q9g5-98pm-w6q7MediumCVSS 6.1

Cobbler XSS Vulnerability

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

October 6, 2023

🔗 CVE IDs covered (1)

CVE-2018-1000225 →

📋 Description

Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting (XSS) vulnerability in cobbler-web that can result in Privilege escalation to admin.. This attack appear to be exploitable via "network connectivity". Sending unauthenticated JavaScript payload to the Cobbler XMLRPC API (/cobbler_api).

🎯 Affected products1

pip/cobbler:<= 2.6.11

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2018-1000225
https://github.com/cobbler/cobbler/issues/1917
https://movermeyer.com/2018-08-02-privilege-escalation-exploits-in-cobblers-api/
https://github.com/cobbler/cobbler/blob/master/cobbler/remote.py#L2236
https://github.com/advisories/GHSA-q9g5-98pm-w6q7