Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2018-12478

obs-service-replace_using_package_version allows to specify arbitrary input files

Description

A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system where the service runs. Affected releases are openSUSE Open Build Service: status of is unknown.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

openSUSE Open Build Service

  • unspecified to < n/aaffected

References