Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2018-12467

delete package via link exploit in open buildservice

Description

Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

opensuse openbuildservice

  • unspecified to < 9.2.4affected

References