High severity8.8NVD Advisory· Published Jun 8, 2018· Updated Jun 17, 2026

CVE-2014-0594

Description

In the Open Build Service (OBS) before version 2.4.6 the CSRF protection is incorrectly disabled in the web interface, allowing for requests without the user's consent.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Open Build Service/open build servicellm-fuzzy
Range: <2.4.6
OpenSUSE/Build servicecpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

bugzilla.suse.com/show_bug.cginvd
github.com/openSUSE/open-build-service/commit/2188c059b67b82171d0e28ef59f77e62d22a09d8nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000