CVE-2018-12467

Published August 1st, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

5.5

MEDIUM

Affected

PROJECT

Description

Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.

openSUSE/open-build-service

Build and distribute Linux packages from sources in an automatic, consistent and reproducible way #obs

GitHub

1.06K