CVE-2014-0594

Published June 8th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.8

MEDIUM

Affected

PROJECT

Description

In the Open Build Service (OBS) before version 2.4.6 the CSRF protection is incorrectly disabled in the web interface, allowing for requests without the user's consent.

openSUSE/open-build-service

Build and distribute Linux packages from sources in an automatic, consistent and reproducible way #obs

GitHub

1.06K