Skip to content
fr Sign in
6.5 Medium

CVE-2018-12475 A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of…

Description

A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is exposed there. This issue affects: openSUSE Open Build Service .

Affected products and versions

Product Affected versions Fixed in
Open Build Service 0.6 earliest → 0.6.2 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Open Build Service

The 13 CVEs of Open Build Service →
CVE-2020-8031 A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build… 6.3 Medium CVE-2020-8021 a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package… 5.3 Medium CVE-2018-12474 Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and… 5.4 Medium CVE-2018-12477 A Improper Neutralization of CRLF Sequences vulnerability in Open Build Service allows remote attackers to cause… 3.5 Low
Track this CVE