CVE-2021-40324
HighCobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
Published Oct 5, 2021 · Updated Sep 10, 2026 · Also known as GHSA-4cfr-gjfx-fj3x, PYSEC-2021-374, UBUNTU-CVE-2021-40324
Key Facts
Patch immediately- CVE-2021-40324 is a high-severity vulnerability (CVSS 8.7 v4) affecting Cobbler (Cobbler Project), branch-network-formula (suse), cpu-mitigations-formula (suse) and 22 more products.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 69% probability of exploitation in the next 30 days.
- Fixed versions are available, including branch-network-formula 0.1.1628156312.dbd0dec-3.3.1, Cobbler 2.4.1-0ubuntu2+esm1, Cobbler 3.0.0+git20190806.32c4bae0-8.22.6.1.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v4
8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS (30-day exploit likelihood)
69%
Higher than 99.3% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
None known
Get the full CVE-2021-40324 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
Affected Products
89 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| CobblerCobbler Project | See advisory | 3.3.0 |
| branch-network-formulasuse | See advisory | 0.1.1628156312.dbd0dec-3.3.1 |
| cpu-mitigations-formulasuse | See advisory | 0.4.0-3.3.1 |
| inter-server-syncsuse | See advisory | 0.0.5-8.3.2 |
| openvpn-formulasuse | See advisory | 0.1.2-3.3.1 |
Patched Releases
branch-network-formula
0.1.1628156312.dbd0dec-3.3.1
Cobbler
2.4.1-0ubuntu2+esm1, 3.0.0+git20190806.32c4bae0-8.22.6.1, 3.1.2-5.8.1, 3.3.0, d8f60bbf14a838c8c8a1dba98086b223e35fe70a, <=3.3.0
cpu-mitigations-formula
0.4.0-3.3.1
inter-server-sync
0.0.5-8.3.2
openvpn-formula
0.1.2-3.3.1
prometheus-exporters-formula
1.0.3-3.6.1
py26-compat-salt
2016.11.10-11.28.6.1
py27-compat-salt
3000.3-7.7.8.1
python3-spacewalk-certs-tools
4.2.12-3.6.2
python3-spacewalk-client-tools
4.2.13-4.6.3
release-notes-susemanager
4.2.2-3.12.1
release-notes-susemanager-proxy
4.2.2-3.12.1
saltboot-formula
0.1.1628156312.dbd0dec-3.3.1
spacecmd
4.2.12-4.6.2
spacewalk-backend
4.2.16-4.6.3
spacewalk-backend-app
4.2.16-4.6.3
spacewalk-backend-applet
4.2.16-4.6.3
spacewalk-backend-config-files
4.2.16-4.6.3
spacewalk-backend-config-files-common
4.2.16-4.6.3
spacewalk-backend-config-files-tool
4.2.16-4.6.3
spacewalk-backend-iss
4.2.16-4.6.3
spacewalk-backend-iss-export
4.2.16-4.6.3
spacewalk-backend-package-push-server
4.2.16-4.6.3
spacewalk-backend-server
4.2.16-4.6.3
spacewalk-backend-sql
4.2.16-4.6.3
Timeline
Publicly disclosed
Oct 5, 2021
Last updated
Sep 10, 2026
Weakness Type
- CWE-20 Improper Input Validation
- CWE-434 Unrestricted Upload of File with Dangerous Type
References
- advisoryhttps://bugzilla.suse.com/1171483
- advisoryhttps://bugzilla.suse.com/1173143
- advisoryhttps://bugzilla.suse.com/1181223
- advisoryhttps://bugzilla.suse.com/1186026
- advisoryhttps://bugzilla.suse.com/1186281
FAQ
Common Questions.
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
Affected: Cobbler (Cobbler Project); branch-network-formula (suse); cpu-mitigations-formula (suse), among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including branch-network-formula 0.1.1628156312.dbd0dec-3.3.1, Cobbler 2.4.1-0ubuntu2+esm1, Cobbler 3.0.0+git20190806.32c4bae0-8.22.6.1.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2021-40324 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo