The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS). In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server.
oryginał ENCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HOpensuse Open Build Service
OSOpensuse0.5.3 – 1.1 (bez)
Powiązane podatności
A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote...
A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build s...
Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc...
A vulnerability in open build service allows remote attackers to gain access to source files even though sourc...
In the Open Build Service (OBS) before version 2.4.6 the CSRF protection is incorrectly disabled in the web in...