Medium · 6.5 CVE-2011-4183 EUVD-2011-4126GHSA-rqg5-w7gw-xqvq

open build service allows anyone to upload rpms

Published Jun 13, 2018 · Updated Sep 17, 2024 · Assigned by microfocus

Vendor: SUSE Product: open build service

Description

A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16.

Affected products

Vendor	Product	Affected	Fixed
SUSE	open build service	unspecified – < 2.1.16	2.1.16

References

https://github.com/openSUSE/open-build-service/commit/5281e4bff9df31f1f91e22a0d1e9086b93b23d7e
https://bugzilla.suse.com/show_bug.cgi?id=736243