CVE-2018-12473CWE-23

path traversal in obs-service-tar_scm

Low · published October 2, 2018

CVSS v3.0
3.1
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

A path traversal traversal vulnerability in obs-service-tar_scm of Open Build Service allows remote attackers to cause access files not in the current build. On the server itself this is prevented by confining the worker via KVM. Affected releases are openSUSE Open Build Service: versions prior to 70d1aa4cc4d7b940180553a63805c22fc62e2cf0.

The record
Technical detail
CVSS v3.0
3.1 · LOW
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01817 · 78.5th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2018-10-02T15:00Z
EPSS history
Timeline
  • 02 OCT 15:00Z
    path traversal in obs-service-tar_scm
    cvelistv5