Cross site scripting

2011-04-1002:51:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the login page in the webui component in SUSE openSUSE Build Service (OBS) before 2.1.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
opensuse_build_serviceeq2.0.103
opensuse_build_serviceeq2.0
opensuse_build_serviceeq2.1.4
opensuse_build_serviceeq2.0.106
opensuse_build_serviceeq2.0.16
opensuse_build_serviceeq2.0.2
opensuse_build_serviceeq1.7
opensuse_build_serviceeq2.0.7
opensuse_build_serviceeq1.0
opensuse_build_servicele2.1.5.1

Name	Operator	Version
opensuse_build_service	eq	2.0.103
opensuse_build_service	eq	2.0
opensuse_build_service	eq	2.1.4
opensuse_build_service	eq	2.0.106
opensuse_build_service	eq	2.0.16
opensuse_build_service	eq	2.0.2
opensuse_build_service	eq	1.7
opensuse_build_service	eq	2.0.7
opensuse_build_service	eq	1.0
opensuse_build_service	le	2.1.5.1