The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS). In versions before 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
opensuse open build service |