Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
No write permission check in change_role command
Vulnerability Description
The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an authenticated attacker to add or remove user roles from packages and/or project meta data.
CVSS Information
N/A
Vulnerability Type
授权机制缺失
Vulnerability Title
Open Build Service API controller 安全漏洞
Vulnerability Description
Open Build Service API是一套以自动、一致和可重复的方式从源代码构建和分发软件包的通用系统。controller是其中的一个控制器。 Open Build Service API 2.4.4之前版本中的controller存在安全漏洞，该漏洞源于程序缺少写入权限的检测。攻击者可利用该漏洞在包或项目元数据中添加或移除用户角色。
CVSS Information
N/A
Vulnerability Type
N/A