open-build-service vulnerabilities (Ubuntu)
10 vulnerabilities.
-
open-build-serviceUbuntu obs: Stored XSS 6.3 Medium -
open-build-serviceUbuntu obs-service-download_files allows downloading from localhost or intranet hosts 6.5 Medium -
open-build-serviceUbuntu Persistent XSS in markdown parser used by obs-server 6.5 Medium -
open-build-serviceUbuntu Request controller allows to create requests with arbitrary request IDs 6.5 Medium -
open-build-serviceUbuntu delete package via link exploit in open buildservice 6.0 Medium -
open-build-serviceUbuntu openbuildservice allowed deleting packages via project links 4.4 Medium -
open-build-serviceUbuntu Open Build Service arbitrary package modification 7.1 High -
open-build-serviceUbuntu Open Build Service accepts arbitrary reviews 7.1 High -
open-build-serviceUbuntu open-build-service retrigger / wipebinaries hitting the wrong project bypassing access permissions 4.4 Medium -
open-build-serviceUbuntu OBS worker VM escape via relative symbolic links 5.0 Medium