CVE-2021-45082

An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.)

• CWE-77

• https://bugzilla.suse.com/show_bug.cgi?id=1193678Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/cobbler/cobbler/releasesRelease Notes, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEJN7CPW6YCHBFQPFZKGA6AVA6T5NPIW/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z5CSXQE7Q4TVDQJKFYBO4XDH3BZ7BLAR/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZCXMOUW4DH4DYWIJN44SMSU6R3CZDZBE/
• https://bugzilla.suse.com/show_bug.cgi?id=1193678Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/cobbler/cobbler/releasesRelease Notes, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEJN7CPW6YCHBFQPFZKGA6AVA6T5NPIW/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z5CSXQE7Q4TVDQJKFYBO4XDH3BZ7BLAR/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZCXMOUW4DH4DYWIJN44SMSU6R3CZDZBE/

Published

Feb 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45071Cross-site scripting (XSS) issue Odoo Community 15.0 and ear…6.1
• CVE-2021-45074JFrog Artifactory before 7.29.3 and 6.23.38, is vulnerable t…5.4
• CVE-2021-45077Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive i…7.5
• CVE-2021-45078stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2…7.8
• CVE-2021-45079In strongSwan before 5.9.5, a malicious responder can send a…9.1
• CVE-2021-45081An issue was discovered in Cobbler through 3.3.1. Routines i…5.9
• CVE-2021-45083An issue was discovered in Cobbler before 3.3.1. Files in /e…7.1
• CVE-2021-45085XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41…6.1
• CVE-2021-45086XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41…6.1
• CVE-2021-45087XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41…6.1
• CVE-2021-45088XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41…6.1
• CVE-2021-45089Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect…5.2