CVE-2018-12466 openbuildservice allowed deleting packages via project links
MediumCVSS 6.5
EPSS 0.80%
- Published
- Updated
- Exploit status
- No public exploit known
Description
openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/open-build-service(Debian:12) | < 2.9.4-4 | 2.9.4-4 |
| openSUSE open build service | < 9.2.4 | 9.2.4 |
| ubuntu/open-build-service(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/open-build-service(Ubuntu:26.04) | All versions | No fix listed |
| openSUSE openbuildservice | <= 2.9.4 | No fix listed |
References
- Debian Security Tracker CVE-2018-12466 vendor-advisory
- 104958 vdb-entry
- bugzilla.suse.com
- github.com
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- bugs.debian.org issue-tracking