Skip to content
OpenAdvisories
Medium · 5.5 CVE-2022-45155 EUVD-2022-48064GHSA-3c33-2j43-9jqp

obs-service-go_modules: arbitrary directory delete

Published Mar 15, 2023 · Updated Feb 27, 2025 · Assigned by suse

Description

An Improper Handling of Exceptional Conditions vulnerability in obs-service-go_modules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-service-go_modules versions prior to 0.6.1.

Affected products

VendorProductAffectedFixed
SUSE openSUSE Factory unspecified – < 0.6.1 0.6.1

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
openSUSE Tumbleweed obs-service-go_modules 0.6.1-1.1 openSUSE-SU-2024:12740-1

Advisories 1

References