GHSA-9fqr-pqc9-f7pjHighCVSS 8.8
Cobbler Web Interface Lacks CSRF Protection
🔗 CVE IDs covered (1)
📋 Description
cobbler: Web interface lacks CSRF protection when using Django framework
🎯 Affected products1
- pip/cobbler:< 2.6.0
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2011-4952
- https://access.redhat.com/security/cve/cve-2011-4952
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4952
- https://security-tracker.debian.org/tracker/CVE-2011-4952
- http://www.openwall.com/lists/oss-security/2012/04/12/10
- https://github.com/cobbler/cobbler/commit/18eb1c06779b37d89dfb2962a08236dd1bab24a6
- https://github.com/cobbler/cobbler/commit/4bee30b4086a8d845bea5d39d6f2cba1f4a396aa
- https://github.com/advisories/GHSA-9fqr-pqc9-f7pj