Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rmgp-j5rm-7ghv

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.

A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.

EPSS

Процентиль: 83%
0.02326
Низкий

7.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 8 лет назад

A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.

CVSS3: 7.8
nvd
больше 8 лет назад

A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.

CVSS3: 7.8
debian
больше 8 лет назад

A shell command injection in the obs-service-source_validator before 0 ...

suse-cvrf
почти 9 лет назад

Security update for the OBS toolchain

suse-cvrf
больше 8 лет назад

Fixing security issues on OBS toolchain

EPSS

Процентиль: 83%
0.02326
Низкий

7.8 High

CVSS3

Дефекты

CWE-78