Skip to content
OpenAdvisories

Product · openSUSE

open build service

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.5
    CVE-2018-12477

    obs-service-refresh_patches can be tricked into deleting '..' or other unrelated directories

    A Improper Neutralization of CRLF Sequences vulnerability in Open Build Service allows remote attackers to cause deletion of directories by tricking obs-service-refresh_patches to delete them. Affected releases are openSUSE Open Build Service: versions prior …

    openSUSE open build service
  • Low 3.1
    CVE-2018-12473

    path traversal in obs-service-tar_scm

    A path traversal traversal vulnerability in obs-service-tar_scm of Open Build Service allows remote attackers to cause access files not in the current build. On the server itself this is prevented by confining the worker via KVM. Affected releases are openSUS…

    openSUSE open build service