6.3
Moyenne
CVE-2024-22033 The OBS service obs-service-download_url was vulnerable to a command injection vulnerability
Description
The OBS service obs-service-download_url was vulnerable to a command injection vulnerability. The attacker could provide a configuration to the service that allowed to execute command in later steps
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SUSE Package Hub 15 SP5 0.2 | premières → < 0.2.1-bp155.3.3.1 | 0.2.1-bp155.3.3.1 |
| SUSE Package Hub 15 SP6 0.2 | premières → < 0.2.1-bp156.2.3.1 | 0.2.1-bp156.2.3.1 |
| openSUSE Leap 15.5 0.2 | premières → < 0.2.1-bp155.3.3.1 | 0.2.1-bp155.3.3.1 |
| openSUSE Leap 15.6 0.2 | premières → < 0.2.1-bp156.2.3.1 | 0.2.1-bp156.2.3.1 |
| openSUSE Tumbleweed 0.2 | premières → < 0.2.1-1.1 | 0.2.1-1.1 |