Approved changes feed: RSS · Atom

cpe:2.3:o:opensuse:open_build_service:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorOpensuse (3380e48e-e718-5685-8ad0-092ef58910e5)
ProductOpen Build Service (ca476dc9-3e0a-57f5-8ff1-e910f9f7c9f5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/opensuse/obs-service-set-version purl2cpe 2026-06-01 10:15:35.981527
pkg:github/opensuse/open-build-service purl2cpe 2026-06-01 10:15:35.981530

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0593 vulnerable 2026-06-03 14:33:39.039917 sed command injection
HIGH (7.8)
The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS). In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server.
Published: 2018-06-08T17:00:00.000Z
Updated: 2024-09-16T16:33:31.630Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3178 vulnerable 2026-06-03 14:31:12.496760 openbuildservice webui code injection
HIGH (8.1)
In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode.
Published: 2018-03-20T18:00:00.000Z
Updated: 2024-09-16T20:47:59.849Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.