Cross-Site Scripting Vulnerabilities in SUSE openSUSE Build Service
CVE-2011-0462

Currently unrated

Key Information:

Vendor
Novell
Status
Opensuse Build Service
Vendor
CVE Published:
10 April 2011

Summary

The openSUSE Build Service contains multiple cross-site scripting vulnerabilities in its web interface login page, which can be exploited by remote attackers. By leveraging these vulnerabilities, attackers may inject arbitrary web scripts or HTML code through unspecified vectors, potentially leading to unauthorized access and manipulation of user data.

References

http://news.opensuse.org/2011/03/02/build-service-team-re...
x_refsource_CONFIRM
https://bugzilla.novell.com/show_bug.cgi?id=669909
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.