open-build-service vulnerabilities (Debian)
10 vulnerabilities.
-
open-build-serviceDebian obs: Stored XSS 6.3 Medium -
open-build-serviceDebian unauthorized read access to files where sourceaccess is disabled via a crafted _service file in Open Build Service 5.3 Medium -
open-build-serviceDebian Persistent XSS in markdown parser used by obs-server 6.5 Medium -
open-build-serviceDebian Request controller allows to create requests with arbitrary request IDs 6.5 Medium -
open-build-serviceDebian delete package via link exploit in open buildservice 6.0 Medium -
open-build-serviceDebian openbuildservice allowed deleting packages via project links 4.4 Medium -
open-build-serviceDebian Open Build Service arbitrary package modification 7.1 High -
open-build-serviceDebian Open Build Service accepts arbitrary reviews 7.1 High -
open-build-serviceDebian open-build-service retrigger / wipebinaries hitting the wrong project bypassing access permissions 4.4 Medium -
open-build-serviceDebian OBS worker VM escape via relative symbolic links 5.0 Medium