{
  "threat_severity" : "Moderate",
  "public_date" : "2022-02-18T00:00:00Z",
  "bugzilla" : {
    "description" : "cobbler: incomplete template sanitization",
    "id" : "2056388",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2056388"
  },
  "cvss3" : {
    "cvss3_base_score" : "7.8",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
    "status" : "draft"
  },
  "cwe" : "CWE-94",
  "details" : [ "An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the \"#from MODULE import\" substring. (Only lines beginning with #import are blocked.)", "A flaw was found in cobbler. The vulnerability occurs due to incomplete template sanitization and leads to code injection. This flaw allows an attacker to interact and inject malicious codes and gain access to the system." ],
  "package_state" : [ {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "rhn-tools:1.0/cobbler",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2021-45082\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-45082" ],
  "name" : "CVE-2021-45082",
  "csaw" : false
}