CVE-2014-0594

In the Open Build Service (OBS) before version 2.4.6 the CSRF protection is incorrectly disabled in the web interface, allowing for requests without the user's consent.

Score

CVSS 3.0 8.8 High

Status

Modified - security@opentext.com

Published

2018-06-08

Last modified

2024-09-16

Weaknesses

CWE-352

Affected products

• Open Build Service (Opensuse)

References

• https://bugzilla.suse.com/show_bug.cgi?id=870606
• https://github.com/openSUSE/open-build-service/commit/2188c059b67b82171d0e28ef59f77e62d22a09d8