Skip to content
OpenAdvisories

Product · openSUSE

Build service

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.1

    login-proxy sends password to attacker-provided domain

    A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed attackers to present users with a expected login form that then sends the clear text credentials to an attacker specified server. This…