Aller au contenu
en Se connecter
6.0 Moyenne

CVE-2018-12467 Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against…

Description

Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.

Produits et versions touchés

Produit Versions touchées Corrigé en
openbuildservice 9.2 premières → < 9.2.4 9.2.4

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de openbuildservice

Les 3 CVE de openbuildservice →
CVE-2018-12466 openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with… 4.4 Moyenne CVE-2011-3178 In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used… 8.1 Élevée
Suivre cette CVE