Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
path traversal in obs-service-tar_scm
Vulnerability Description
A path traversal traversal vulnerability in obs-service-tar_scm of Open Build Service allows remote attackers to cause access files not in the current build. On the server itself this is prevented by confining the worker via KVM. Affected releases are openSUSE Open Build Service: versions prior to 70d1aa4cc4d7b940180553a63805c22fc62e2cf0.
CVSS Information
N/A
Vulnerability Type
相对路径遍历
Vulnerability Title
Open Build Service 路径遍历漏洞
Vulnerability Description
Open Build Service（OBS）是一套通用的、以自动、一致和可重复的方式从源代码构建和分发软件包的系统。 OBS 70d1aa4cc4d7b940180553a63805c22fc62e2cf0之前版本中的obs-service-tar_scm存在路径遍历漏洞。远程攻击者可利用该漏洞访问repo之外的文件。
CVSS Information
N/A
Vulnerability Type
N/A