Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victim
References
| Link | Resource |
|---|---|
| https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-22034 |
Configurations
No configuration.
History
16 Oct 2024, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-16 14:15
Updated : 2024-10-16 16:38
NVD link : CVE-2024-22034
Mitre link : CVE-2024-22034
CVE.ORG link : CVE-2024-22034
JSON object : View
Products Affected
No product.
CWE
No CWE.