Advisories · Technology

SUSE Open Build Service.

Every CVE that names SUSE Open Build Service among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-21949 CVE record

CVSS 8.8 High

Multiple XXE vulnerabilities in OBS
- SUSE Open Build Service
- XML external entities (XXE)
Not analysed yet 3 May 2022
CVE-2011-4183 CVE record

CVSS 6.5 Medium

open build service allows anyone to upload rpms
- SUSE open build service
- Broken access control
Not analysed yet 13 Jun 2018
CVE-2011-4181 CVE record

CVSS 4.3 Medium

open build service information leak via unauthorized source access
- SUSE open build service
- Broken access control
Not analysed yet 11 Jun 2018
CVE-2015-0796 CVE record

CVSS 6.3 Medium

open build service source server symlink exploitation via source patch
- SUSE open build service
- Unrestricted file upload
Not analysed yet 2 Mar 2018
CVE-2017-9268 CVE record

CVSS 4.4 Medium

open-build-service retrigger / wipebinaries hitting the wrong project bypassing access permissions
- SUSE open build service
- Broken access control
Not analysed yet 1 Mar 2018