Skip to content
OpenAdvisories

Archive

9 October 2018

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Low 3.5

    obs-service-refresh_patches can be tricked into deleting '..' or other unrelated directories

    A Improper Neutralization of CRLF Sequences vulnerability in Open Build Service allows remote attackers to cause deletion of directories by tricking obs-service-refresh_patches to delete them. Affected releases are openSUSE Open Build Service: versions prior …