Product · openSUSE

openbuildservice

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.4

CVE-2018-12466

openbuildservice allowed deleting packages via project links

openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links.

openSUSE openbuildservice open-build-service open-build-service Debian Ubuntu

Aug 1, 2018
Medium 6.0

CVE-2018-12467

delete package via link exploit in open buildservice

Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.

openSUSE openbuildservice open-build-service open-build-service Debian Ubuntu

Aug 1, 2018