Executive brief
Cobbler Web Interface Lacks CSRF Protection
Affected products
- PyPI cobbler
Junglewise Threat Intelligence
CVE-2011-4952: PYSEC-2026-624 - Cobbler Web Interface Lacks CSRF Protection
CVE-2011-4952 · Severity: low · CVSS 3.1 · Published 2026-07-02
Technologies: cobbler (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-794 - Cobbler is vulnerable to code injection
- PYSEC-2026-792 - Cobbler subject to Command Injection
- PYSEC-2026-793 - Cobbler vulnerable to code injection via unsafe YAML loading
- PYSEC-2026-795 - Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability
- PYSEC-2026-797 - Cobbler Path Traversal vulnerability