CVE:CVE-2021-45082
CNNVD:CNNVD-202202-1623
Cobbler是一款网络安装服务器套件，它主要用于快速建立Linux网络安装环境。
Cobbler 3.3.1之前版本存在安全漏洞，该漏洞源于templar.py文件里函数check_for_invalid_imports可以允许Cheetah代码通过“#from MODULE import”子字符串导入Python模块。
solution:Upgrade cobbler_project cobbler to a higher version than 3.3.1,and avoid the version (,3.3.1); Upgrade opensuse factory to a higher version than -; Upgrade opensuse backports to a higher version than sle-15:sp3,sle-15:sp4,and avoid the version sle-15:sp3,sle-15:sp4; Upgrade suse linux_enterprise_server to a higher version than 11:sp3,12,15:sp2,15:sp3,and avoid the version 11:sp3,12,15:sp2,15:sp3; Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36