CVE-2014-0593CWE-78

sed command injection

High · published June 8, 2018

CVSS v3.0
7.8
EPSS
2%
Percentile
79.0
In the wild
Unconfirmed
What it is

The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS). In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server.

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01869 · 79.0th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2018-06-08T17:00Z
EPSS history
Timeline
  • 08 JUN 17:00Z
    sed command injection
    cvelistv5