CVE-2020-8020

概要

参考情報

• bugzilla.suse.com/show_bug.cgi · Issue Tracking
• lists.debian.org/debian-lts-announce/2021/02/msg00006.html · Mailing List

open build service のその他の脆弱性

• CVE-2022-21949高 8.8A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference extern…
• CVE-2021-36777高 8.8A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed attackers to pr…
• CVE-2020-8031中 5.4A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Service allows remote att…
• CVE-2020-8021中 5.3a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceacc…
• CVE-2019-3685高 7.7Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary