Skip to content
OpenAdvisories
Medium · 4.8 CVE-2018-12478 EUVD-2018-4448GHSA-5h3v-27vw-f738

obs-service-replace_using_package_version allows to specify arbitrary input files

Published Oct 9, 2018 · Updated Sep 16, 2024 · Assigned by microfocus

Description

A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system where the service runs. Affected releases are openSUSE Open Build Service: status of is unknown.

Affected products

VendorProductAffectedFixed
openSUSE Open Build Service unspecified – < n/a n/a

References