CVE-2018-7688 — Open Build Service accepts arbitrary reviews
A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sources in projects where they do not hav…
Published: 2018-06-07 · CVSS: 7.1 · CVSS 3.0
A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sources in projects where they do not have write permissions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7