8.8
Élevée
CVE-2022-21949 A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers…
Description
A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations. This can be used to gain information from the server that can be abused to escalate to Admin privileges on OBS. This issue affects: SUSE Open Build Service Open Build Service versions prior to 2.10.13.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| open build service 2.10 | premières → < 2.10.13 | 2.10.13 |
Références
- bugzilla.suse.com bugzilla.suse.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de open build service
Les 5 CVE de open build service →
CVE-2011-4183
A vulnerability in open build service allows remote attackers to upload arbitrary RPM files
6.5
Moyenne
CVE-2011-4181
A vulnerability in open build service allows remote attackers to gain access to source files even though source access…
4.3
Moyenne
CVE-2015-0796
In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application…
6.3
Moyenne
CVE-2017-9268
In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for…
4.4
Moyenne