CVE-2018-12477

—

CVSS 3.0

7.5 high

EPSS

1%p66

Published

Oct 9, 2018 (Oct 9, 2018)

Modified

Jun 17, 2026

Description

A Improper Neutralization of CRLF Sequences vulnerability in Open Build Service allows remote attackers to cause deletion of directories by tricking obs-service-refresh_patches to delete them. Affected releases are openSUSE Open Build Service: versions prior to d6244245dda5367767efc989446fe4b5e4609cce.

Vendors: opensuse
Products: leap
Weakness: CWE-93
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.