Opensuse Openbuildservice vulnerabilities

3 vulnerabilities

Known vulnerabilities in Opensuse Openbuildservice, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2018-12466debianopen-build-service+3
EPSS score
0.80%
openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links.6.5CVE-2018-12467debianopen-build-service+3
EPSS score
0.65%
Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.8.8CVE-2011-3178opensuseopen_build_service+1
EPSS score
1.30%
In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode.