Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rmgp-j5rm-7ghv

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.

A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.

EPSS

Процентиль: 64%
0.00474
Низкий

7.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 8 лет назад

A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.

CVSS3: 7.8
nvd
почти 8 лет назад

A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.

CVSS3: 7.8
debian
почти 8 лет назад

A shell command injection in the obs-service-source_validator before 0 ...

suse-cvrf
около 8 лет назад

Security update for the OBS toolchain

suse-cvrf
около 8 лет назад

Fixing security issues on OBS toolchain

EPSS

Процентиль: 64%
0.00474
Низкий

7.8 High

CVSS3

Дефекты

CWE-78