← CVE Intelligence

CVE-2018-12477

obs-service-refresh_patches can be tricked into deleting '..' or other unrelated directories PUBLISHED

Description (CNA)

A Improper Neutralization of CRLF Sequences vulnerability in Open Build Service allows remote attackers to cause deletion of directories by tricking obs-service-refresh_patches to delete them. Affected releases are openSUSE Open Build Service: versions prior to d6244245dda5367767efc989446fe4b5e4609cce.

Affected (CNA)

Vendor / productVersions
openSUSE / Open Build Serviceaffected unspecified before d6244245dda5367767efc989446fe4b5e4609cce

CWE

CWE-93

References

ADP enrichment

CVE

No English description supplied.