tocsin

Debian/open-build-service: medium 5.4

A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Service allows remote attackers to store JS code in markdown that is not properly esc

Action: Upgrade open-build-service to 2.9.4-4 or later.

Affected

introducedfixedlast affected
02.9.4-4-

Fixed versions

2.9.4-4

Sources

published · modified · JSON