← CVE Intelligence

CVE-2018-12478

obs-service-replace_using_package_version allows to specify arbitrary input files PUBLISHED

Description (CNA)

A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system where the service runs. Affected releases are openSUSE Open Build Service: status of is unknown.

Affected (CNA)

Vendor / productVersions
openSUSE / Open Build Serviceaffected unspecified before n/a

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.