Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-12475

Опубликовано: 01 сент. 2020
Источник: nvd
CVSS3: 6.5
CVSS3: 5.4
CVSS2: 5.5
EPSS Низкий

Описание

A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is exposed there. This issue affects: openSUSE Open Build Service .

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:opensuse:open_build_service:-:*:*:*:*:*:*:*

EPSS

Процентиль: 61%
0.00418
Низкий

6.5 Medium

CVSS3

5.4 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-610

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 5 лет назад

A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is exposed there. This issue affects: openSUSE Open Build Service .

github
больше 3 лет назад

A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is exposed there. This issue affects: openSUSE Open Build Service .

EPSS

Процентиль: 61%
0.00418
Низкий

6.5 Medium

CVSS3

5.4 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-610