CVE-2010-3782

HIGH 8.8CVE-2010-3782 · Published 02/01/2020 · updated 16/06/2026

In short

CVE-2010-3782 is a HIGH (CVSS 8.8) vulnerability affecting obs-server (obs-server).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.6% of all vulnerabilities.
Fix: update to 1.7.7 or later.

Package	Affected versions	Patched versions
obs-server obs-server	`< 1.7.7`	`1.7.7`

obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.