{"action":"Upgrade cobbler to 3.2.3 (3.2.x) or 3.3.7 (3.3.x) or later.","affected":[{"fixed":"3.3.7","introduced":"3.3.0"},{"fixed":"3.2.3","introduced":"3.0.0"}],"component":"cobbler","cve_ids":["CVE-2024-47533"],"ecosystem":"PyPI","epss":0.04003,"exploited":false,"fixed_versions":["3.3.7","3.2.3"],"ghsa_id":"GHSA-m26c-fcgh-cp6h","id":"tcs_01M5KFPWWHEX43E3AZQ5SJ2R7S","modified_at":"2026-06-29T12:26:31.492354362Z","published_at":"2024-11-18T20:00:56Z","references":["https://osv.dev/vulnerability/GHSA-m26c-fcgh-cp6h","https://github.com/cobbler/cobbler/security/advisories/GHSA-m26c-fcgh-cp6h","https://nvd.nist.gov/vuln/detail/CVE-2024-47533","https://github.com/cobbler/cobbler/commit/32c5cada013dc8daa7320a8eda9932c2814742b0","https://github.com/cobbler/cobbler/commit/e19717623c10b29e7466ed4ab23515a94beb2dda","https://github.com/cobbler/cobbler"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-m26c-fcgh-cp6h","url":"https://osv.dev/vulnerability/GHSA-m26c-fcgh-cp6h"}],"summary":"cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes"}