Opensuse Openbuildservice vulnerabilities
3 known vulnerabilities affecting opensuse/openbuildservice.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2011-3178P3HIGHCVSS 8.8≥ unspecified, < 2.3.02018-03-20
CVE-2011-3178 [HIGH] CWE-78 CVE-2011-3178: In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes stat
In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode.
nvd
CVE-2018-12467P4MEDIUMCVSS 6.5≥ unspecified, < 9.2.42018-08-01
CVE-2018-12467 [MEDIUM] CWE-285 CVE-2018-12467: Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious req
Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.
nvd
CVE-2018-12466P4MEDIUMCVSS 6.5≥ unspecified, ≤ 2.9.42018-08-01
CVE-2018-12466 [MEDIUM] CWE-285 CVE-2018-12466: openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific pr
openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links.
nvd