Suse Open Build Service Vulnerabilities

Suse Open Build Service vulnerabilities.

3 May 2022

Multiple XXE vulnerabilities in OBS
CVE-2022-21949
SuseOpen Build Service8.8HIGH

13 June 2018

open build service allows anyone to upload rpms
CVE-2011-4183
SuseOpen Build Service6.5MEDIUM

11 June 2018

open build service information leak via unauthorized source access
CVE-2011-4181
SuseOpen Build Service4.3MEDIUM

2 March 2018

open build service source server symlink exploitation via source patch
CVE-2015-0796
SuseOpen Build Service6.3MEDIUM

1 March 2018

open-build-service retrigger / wipebinaries hitting the wrong project bypassing access permissions
CVE-2017-9268
SuseOpen Build Service4.4MEDIUM

No more vulnerabilities to load.