CVE-2018-7688

2018-06-0713:29:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.1%

JSON

A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sources in projects where they do not have write permissions.

CPENameOperatorVersion
open-build-serviceeq2.9.1
open-build-serviceeq2.3.90
open-build-serviceeq2.4.50
open-build-serviceeq1.9.90
open-build-serviceeq2.3.91
open-build-serviceeq2.4.51
open-build-serviceeq2.5.50
open-build-serviceeq2.9.0
open-build-serviceeq2.9.2
open-build-serviceeq2.3.60

Name	Operator	Version
open-build-service	eq	2.9.1
open-build-service	eq	2.3.90
open-build-service	eq	2.4.50
open-build-service	eq	1.9.90
open-build-service	eq	2.3.91
open-build-service	eq	2.4.51
open-build-service	eq	2.5.50
open-build-service	eq	2.9.0
open-build-service	eq	2.9.2
open-build-service	eq	2.3.60