Description
In the Open Build Service (OBS) before version 2.4.6 the CSRF protection is incorrectly disabled in the web interface, allowing for requests without the user's consent.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| openSUSE | Open Build Service | unspecified – < 2.4.6 | 2.4.6 |