CVE-2014-0594

Summary

In the Open Build Service (OBS) before version 2.4.6 the CSRF protection is incorrectly disabled in the web interface, allowing for requests without the user's consent.

Affected Software

Weaknesses

• CWE-352: CWE-352

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/openSUSE/open-build-service/commit/2188c059b67b82171d0e28ef59f77e62d22a09d8
• https://bugzilla.suse.com/show_bug.cgi?id=870606

References

• https://github.com/openSUSE/open-build-service/commit/2188c059b67b82171d0e28ef59f77e62d22a09d8
• https://bugzilla.suse.com/show_bug.cgi?id=870606

• ←Previous
• Next→