Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2018-12474

Crafted service parameters allows to induce unexpected behaviour in obs-service-tar_scm

Description

Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and extract information outside the current build or cause the creation of file in attacker controlled locations. Affected releases are openSUSE Open Build Service: versions prior to 51a17c553b6ae2598820b7a90fd0c11502a49106.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

openSUSE Open Build Service

  • unspecified to < 51a17c553b6ae2598820b7a90fd0c11502a49106affected

References