Skip to content
fr Sign in
6.0 Medium

CVE-2018-12467 Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against…

Description

Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.

Affected products and versions

Product Affected versions Fixed in
openbuildservice 9.2 earliest → < 9.2.4 9.2.4

References

Timeline

  1. Published
  2. Last modified

Other CVEs of openbuildservice

The 3 CVEs of openbuildservice →
CVE-2018-12466 openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with… 4.4 Medium CVE-2011-3178 In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used… 8.1 High
Track this CVE