Description (CNA)
The OBS service obs-service-download_url was vulnerable to a command injection vulnerability. The attacker could provide a configuration to the service that allowed to execute command in later steps
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SUSE / SUSE Package Hub 15 SP5 | affected ? before 0.2.1-bp155.3.3.1 |
| SUSE / SUSE Package Hub 15 SP6 | affected ? before 0.2.1-bp156.2.3.1 |
| SUSE / openSUSE Leap 15.5 | affected ? before 0.2.1-bp155.3.3.1 |
| SUSE / openSUSE Leap 15.6 | affected ? before 0.2.1-bp156.2.3.1 |
| SUSE / openSUSE Tumbleweed | affected ? before 0.2.1-1.1 |
CWE
CWE-78
References
ADP enrichment
No English description supplied.
No references supplied.