6.5
CVSSv3

CVE-2018-12478

Published: 09/10/2018 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

A Improper Input Validation vulnerability in Open Build Service allows remote malicious users to extract files from the system where the service runs. Affected releases are openSUSE Open Build Service: status of is unknown.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

opensuse open build service -

Vendor Advisories

Debian Bug report logs - #911797 Multiple vulnerabilities Package: src:open-build-service; Maintainer for src:open-build-service is Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Wed, 24 Oct 2018 21:36:01 UTC Severity: grave ...