CVE-2024-22034 — Crafted projects can overwrite special files in the .osc config directory
Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victim
Published: 2024-10-16 · CVSS: 5.5 · CVSS 3.1
Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victim
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7