VYPR

Opensuse Build Service

by Novell

Source repositories

CVEs (2)

  • CVE-2011-0466Apr 10, 2011
    risk 0.00cvss epss 0.01

    The API in SUSE openSUSE Build Service (OBS) 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass intended write-access restrictions and modify a (1) package or (2) project via unspecified vectors.

  • CVE-2011-0462Apr 10, 2011
    risk 0.00cvss epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the login page in the webui component in SUSE openSUSE Build Service (OBS) before 2.1.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.