CVE-2022-0860: Cobbler Project Cobbler

Critical severity, CVSS 9.1. EPSS: 2.3% chance of exploitation in the next 30 days.

Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.

Affected products

• Cobbler Project Cobbler: before 3.3.2 (fixed in 3.3.2)
• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only

Published 2022-03-11. Last modified 2026-06-17.