| CVE-2020-8031 |
A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build…
|
6.3
Medium
|
Feb 11, 2021 |
| CVE-2018-12475 |
A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of…
|
6.5
Medium
|
Sep 1, 2020 |
| CVE-2020-8021 |
a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package…
|
5.3
Medium
|
May 19, 2020 |
| CVE-2018-12477 |
A Improper Neutralization of CRLF Sequences vulnerability in Open Build Service allows remote attackers to cause…
|
3.5
Low
|
Oct 9, 2018 |
| CVE-2018-12474 |
Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and…
|
5.4
Medium
|
Oct 9, 2018 |
| CVE-2018-12479 |
A Improper Input Validation vulnerability in Open Build Service allows remote attackers to cause DoS by specifying…
|
6.5
Medium
|
Oct 9, 2018 |
| CVE-2018-12478 |
A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system…
|
4.8
Medium
|
Oct 9, 2018 |
| CVE-2018-12473 |
A path traversal traversal vulnerability in obs-service-tar_scm of Open Build Service allows remote attackers to cause…
|
3.1
Low
|
Oct 2, 2018 |
| CVE-2013-3703 |
The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an…
|
8.8
High
|
Jun 8, 2018 |
| CVE-2014-0594 |
In the Open Build Service (OBS) before version 2.4.6 the CSRF protection is incorrectly disabled in the web interface,…
|
8.8
High
|
Jun 8, 2018 |
| CVE-2018-7689 |
Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed…
|
7.1
High
|
Jun 7, 2018 |
| CVE-2018-7688 |
A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all…
|
7.1
High
|
Jun 7, 2018 |
| CVE-2017-5188 |
The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside…
|
5.0
Medium
|
Mar 1, 2018 |