Description (CNA)
In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| opensuse / openbuildservice | affected unspecified before 2.3.0 |
CWE
CWE-78
References
- https://github.com/openSUSE/open-build-service/commit/cbfe2ed36dd77c0843702935dea7f914bb599201
- https://bugzilla.suse.com/show_bug.cgi?id=723788
ADP enrichment
No English description supplied.