6.5
Moyenne
CVE-2018-12475 A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of…
Description
A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is exposed there. This issue affects: openSUSE Open Build Service .
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Open Build Service 0.6 | premières → 0.6.2 | Pas de correctif indiqué |
Autres CVE de Open Build Service
Les 13 CVE de Open Build Service →
CVE-2020-8031
A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build…
6.3
Moyenne
CVE-2020-8021
a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package…
5.3
Moyenne
CVE-2018-12474
Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and…
5.4
Moyenne
CVE-2018-12477
A Improper Neutralization of CRLF Sequences vulnerability in Open Build Service allows remote attackers to cause…
3.5
Faible