CVE-2022-21949

概要

参考情報

• bugzilla.suse.com/show_bug.cgi · Issue Tracking

open build service のその他の脆弱性

• CVE-2021-36777高 8.8A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed attackers to pr…
• CVE-2020-8031中 5.4A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Service allows remote att…
• CVE-2020-8021中 5.3a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceacc…
• CVE-2020-8020中 6.1A Improper Neutralization of Input During Web Page Generation vulnerability in open-build-service allows remote attackers to store arbitrary…
• CVE-2019-3685高 7.7Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary