Vigilance.fr - Cobbler: directory escape via Profile Kickstart Field, analyzed on 15/11/2023
January 2024 by Vigilance.fr
An attacker can escape from the working directory of Cobbler, via Profile Kickstart Field, in order to read a file outside the service root path.
See previous articles
See next articles
Your podcast HereNew, you can have your Podcast here. Contact us for more information ask:
Marc Brami
Phone: +33 1 40 92 05 55
Mail: ipsimp@free.fr
All new podcasts
News
