fr Sign in

4.4 Medium

CVE-2018-12466 openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with…

Description

openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links.

Affected products and versions

Product	Affected versions	Fixed in
openbuildservice 2.9	earliest → 2.9.4	No fix stated

References

104958 www.securityfocus.com
github.com github.com
bugzilla.suse.com bugzilla.suse.com

Timeline

Published August 1, 2018
Last modified September 17, 2024

The 3 CVEs of openbuildservice →

CVE-2018-12467 Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against… 6.0 Medium CVE-2011-3178 In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used… 8.1 High

Track this CVE