https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T13:20:51.236348+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-12476 CVE-2018-12476 — obs-service-extract_file's outfilename parameter allows to write files outside of package directory 2026-10-09T13:20:51.254833+00:00

Affected: SUSE Linux Enterprise Server 15, openSUSE Factory

Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the machine of the local user if a malicious service is executed. This issue affects: SUSE Linux Enterprise Server 15 obs-service-tar_scm versions prior to 0.9.2.1537788075.fefaa74:. openSUSE Factory obs-service-tar_scm versions prior to 0.9.2.1537788075.fefaa74.