Schoolguy

**Name of the Vulnerable Software and Affected Versions** Cobbler versions prior to 3.3.0 **Description** The issue allows log poisoning and resultant Remote Code Execution via an XMLRPC method that logs to the logfile for template injection. **Recommendations** For versions prior to 3.3.0, update to version 3.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the XMLRPC method to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Cobbler versions prior to 3.3.0 **Description** The issue allows arbitrary file write operations via `upload log data`. **Recommendations** For versions prior to 3.3.0, update to version 3.3.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Cobbler versions prior to 3.3.0 **Description** The issue allows for authorization bypass, enabling modification of settings. **Recommendations** For versions prior to 3.3.0, update to version 3.3.0 or later to resolve the issue.