{"action":"Upgrade cobbler to 2.6.0 or later.","affected":[{"fixed":"2.6.0","introduced":"0"}],"component":"cobbler","cve_ids":["CVE-2011-4952"],"ecosystem":"PyPI","epss":0.00635,"exploited":false,"fixed_versions":["2.6.0"],"ghsa_id":"GHSA-9fqr-pqc9-f7pj","id":"tcs_01M5KHCH7R4P6MEMNRJAK52VAY","modified_at":"2026-07-06T08:00:10.486719409Z","published_at":"2026-07-02T14:13:17.843067Z","references":["https://osv.dev/vulnerability/PYSEC-2026-624","https://nvd.nist.gov/vuln/detail/CVE-2011-4952","https://github.com/cobbler/cobbler/commit/18eb1c06779b37d89dfb2962a08236dd1bab24a6","https://github.com/cobbler/cobbler/commit/4bee30b4086a8d845bea5d39d6f2cba1f4a396aa","https://access.redhat.com/security/cve/cve-2011-4952","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4952","https://github.com/cobbler/cobbler","https://security-tracker.debian.org/tracker/CVE-2011-4952","http://www.openwall.com/lists/oss-security/2012/04/12/10","https://pypi.org/project/cobbler","https://github.com/advisories/GHSA-9fqr-pqc9-f7pj"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-624","url":"https://osv.dev/vulnerability/PYSEC-2026-624"}],"summary":"Cobbler Web Interface Lacks CSRF Protection"}