| Package | Affected versions | Patched versions |
|---|---|---|
| open build service | < 2.4.6 | 2.4.6 |
In the Open Build Service (OBS) before version 2.4.6 the CSRF protection is incorrectly disabled in the web interface, allowing for requests without the user's consent.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free