{"action":"Upgrade cobbler to 2.6.0 or later.","affected":[{"fixed":"2.6.0","introduced":"0"}],"component":"cobbler","cve_ids":["CVE-2011-4952"],"ecosystem":"PyPI","epss":0.00635,"exploited":false,"fixed_versions":["2.6.0"],"ghsa_id":"GHSA-9fqr-pqc9-f7pj","id":"tcs_01M5KFAQWBN248F9HYD248JR3V","modified_at":"2026-07-06T08:11:14.127350102Z","published_at":"2022-04-22T00:24:14Z","references":["https://osv.dev/vulnerability/GHSA-9fqr-pqc9-f7pj","https://nvd.nist.gov/vuln/detail/CVE-2011-4952","https://github.com/cobbler/cobbler/commit/18eb1c06779b37d89dfb2962a08236dd1bab24a6","https://github.com/cobbler/cobbler/commit/4bee30b4086a8d845bea5d39d6f2cba1f4a396aa","https://access.redhat.com/security/cve/cve-2011-4952","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4952","https://github.com/cobbler/cobbler","https://security-tracker.debian.org/tracker/CVE-2011-4952","http://www.openwall.com/lists/oss-security/2012/04/12/10"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-9fqr-pqc9-f7pj","url":"https://osv.dev/vulnerability/GHSA-9fqr-pqc9-f7pj"}],"summary":"Cobbler Web Interface Lacks CSRF Protection"}