Osc
1 CVEs
product
Monthly
osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
Privilege Escalation
Osc
Opensuse
NVD
CVSS 2.0
4.3
EPSS
0.4%
EPSS 0%
CVSS 4.3
MEDIUM
This Month
osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
Privilege Escalation
Osc
Opensuse
NVD