CVE-2021-36777: Opensuse Open Build Service

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed attackers to present users with a expected login form that then sends the clear text credentials to an attacker specified server. This issue affects: openSUSE Build service login-proxy-scripts versions prior to dc000cdfe9b9b715fb92195b1a57559362f689ef.

Affected products

• Opensuse Open Build Service: before 2021-10-08 (fixed in 2021-10-08)

Published 2022-03-09. Last modified 2026-06-17.