2021-02-11 15:10:15
suse
PUBLISHED
A Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in Open Build Service allows remote attackers to store JS code in markdown that is not properly escaped, impacting confidentiality and integrity. This issue affects: Open Build Service versions prior to 2.10.8.