CVE-2021-36777

A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed attackers to present users with a expected login form that then sends the clear text credentials to an attacker specified server. This issue affects: openSUSE Build service login-proxy-scripts versions prior to dc000cdfe9b9b715fb92195b1a57559362f689ef.

Score

CVSS 3.1 8.8 High

Status

Modified - meissner@suse.de

Published

2022-03-09

Last modified

2024-09-16

Weaknesses

CWE-807

Affected products

• Build Service (Opensuse)
• Open Build Service (Opensuse)

References

• https://bugzilla.suse.com/show_bug.cgi?id=1191209