CVE-2011-4952 — Cross-Site Request Forgery in Project Cobbler

CWE-352 — Cross-Site Request Forgery6 documents6 sources
Severity
8.8HIGHNVD
EPSS
0.3%
top 49.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cobbler Project CobblerCobbler
Timeline
PublishedNov 19
Latest updateApr 22

Description

cobbler: Web interface lacks CSRF protection when using Django framework

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5cobbler/cobbler2011-09-28

🔴Vulnerability Details

3
OSV
Cobbler Web Interface Lacks CSRF Protection↗2022-04-22
▶
GHSA
Cobbler Web Interface Lacks CSRF Protection↗2022-04-22
▶
CVEList
CVE-2011-4952: cobbler: Web interface lacks CSRF protection when using Django framework↗2019-11-19
▶

📋Vendor Advisories

1
Red Hat
(cobbler-web): Absent CSRF protection when using Django framework↗2011-09-28
▶

💬Community

1
Bugzilla
CVE-2011-4952 cobbler (cobbler-web): Absent CSRF protection when using Django framework↗2012-04-12
▶
CVE-2011-4952 — Cross-Site Request Forgery | cvebase