7.8
High
CVE-2017-9274 A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager…
Description
A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| obs-service-source_validator 0.7 | earliest → < 0.7 | 0.7 |