Description
In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| opensuse | openbuildservice | unspecified – < 2.3.0 | 2.3.0 |