CVE-2014-0593 sed command injection
CriticalCVSS 9.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS). In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openSUSE open build service | >= 0.5.3, < 1.1 | 1.1 |
| openSUSE obs-service-set_version | < 0.5.3-1.1 | 0.5.3-1.1 |