CVE-2018-12478 — obs-service-replace_using_package_version allows to specify arbitrary input files
A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system where the service runs. Affected releases are openSUSE O…
Published: 2018-10-09 · CVSS: 4.8 · CVSS 3.0
A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system where the service runs. Affected releases are openSUSE Open Build Service: status of is unknown.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7