CVEvulnerability
CVE-2011-0462
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-04-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the login page in the webui component in SUSE openSUSE Build Service (OBS) before 2.1.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• novell opensuse build service (<= 2.1.5.1)
• novell opensuse build service 1.0
• novell opensuse build service 1.5
• novell opensuse build service 1.6
• novell opensuse build service 1.7
• novell opensuse build service 1.7.0
• novell opensuse build service 1.7.2
• novell opensuse build service 1.7.3
• novell opensuse build service 1.7.4
• novell opensuse build service 1.7.5
• novell opensuse build service 1.7.6
• novell opensuse build service 1.7.7
• novell opensuse build service 1.8
• novell opensuse build service 1.9.90
• novell opensuse build service 1.9.91
• novell opensuse build service 1.9.92
• novell opensuse build service 2.0
• novell opensuse build service 2.0.0
• novell opensuse build service 2.0.1
• novell opensuse build service 2.0.2
• novell opensuse build service 2.0.3
• novell opensuse build service 2.0.4
• novell opensuse build service 2.0.5
• novell opensuse build service 2.0.6
• novell opensuse build service 2.0.7
• novell opensuse build service 2.0.8
• novell opensuse build service 2.0.16
• novell opensuse build service 2.0.103
• novell opensuse build service 2.0.104
• novell opensuse build service 2.0.106
• novell opensuse build service 2.1
• novell opensuse build service 2.1.0
• novell opensuse build service 2.1.1
• novell opensuse build service 2.1.2
• novell opensuse build service 2.1.3
• novell opensuse build service 2.1.4
• novell opensuse build service 2.1.5
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://news.opensuse.org/2011/03/02/build-service-team-releases-new-versions-fixing-security-problems/ news.opensuse.org
- https://bugzilla.novell.com/show_bug.cgi?id=669909 bugzilla.novell.com
- http://news.opensuse.org/2011/03/02/build-service-team-releases-new-versions-fixing-security-problems/ news.opensuse.org
- https://bugzilla.novell.com/show_bug.cgi?id=669909 bugzilla.novell.com