Skip to main content

Open Build Service CVE-2022-21949

HIGH
Improper Restriction of XML External Entity Reference (CWE-611)
2022-05-03 meissner@suse.de
8.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.8 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
May 03, 2022 - 08:15 nvd
HIGH 8.8

DescriptionNVD

A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations. This can be used to gain information from the server that can be abused to escalate to Admin privileges on OBS. This issue affects: SUSE Open Build Service Open Build Service versions prior to 2.10.13.

AnalysisAI

A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as XML External Entity (XXE) (CWE-611), which allows attackers to read arbitrary files or perform SSRF through XML processing. A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations. This can be used to gain information from the server that can be abused to escalate to Admin privileges on OBS. This issue affects: SUSE Open Build Service Open Build Service versions prior to 2.10.13. Affected products include: Opensuse Open Build Service. Version information: prior to 2.10.13..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Disable external entity processing in XML parsers, use JSON instead of XML where possible.

CVE-2019-3685 HIGH POC
7.7 Nov 05

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client bi

CVE-2020-8021 MEDIUM POC
5.3 May 19

a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package

CVE-2018-12479 HIGH
7.5 Oct 09

A Improper Input Validation vulnerability in Open Build Service allows remote attackers to cause DoS by specifying craft

CVE-2018-12473 HIGH
7.5 Oct 02

A path traversal traversal vulnerability in obs-service-tar_scm of Open Build Service allows remote attackers to cause a

CVE-2018-12478 MEDIUM
6.5 Oct 09

A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system

CVE-2018-12467 MEDIUM
6.5 Aug 01

Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against project

CVE-2018-12466 MEDIUM
6.5 Aug 01

openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project

CVE-2018-7689 MEDIUM
6.5 Jun 07

Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed aut

CVE-2018-7688 MEDIUM
6.5 Jun 07

A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated

CVE-2020-8020 MEDIUM
6.1 May 13

A Improper Neutralization of Input During Web Page Generation vulnerability in open-build-service allows remote attacker

Share

CVE-2022-21949 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy