PyPI/cobbler CVE-2011-4952: high 8.8, EPSS 0.64%

Cobbler Web Interface Lacks CSRF Protection

Action: Upgrade cobbler to 2.6.0 or later.

pip install cobbler==2.6.0

Affected

Fixed versions

Sources

• osv: GHSA-9fqr-pqc9-f7pj
• https://nvd.nist.gov/vuln/detail/CVE-2011-4952
• https://github.com/cobbler/cobbler/commit/18eb1c06779b37d89dfb2962a08236dd1bab24a6
• https://github.com/cobbler/cobbler/commit/4bee30b4086a8d845bea5d39d6f2cba1f4a396aa
• https://access.redhat.com/security/cve/cve-2011-4952
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4952
• https://github.com/cobbler/cobbler
• https://security-tracker.debian.org/tracker/CVE-2011-4952
• http://www.openwall.com/lists/oss-security/2012/04/12/10

CVE-2011-4952 · published 2022-04-22T00:24:14Z · modified 2026-07-06T08:11:14.127350102Z · JSON