VULNERABILITY INTELLIGENCE

CVE-2018-12475

CVSS score6.5 MEDIUM

EPSS probability15.76%

CISA KEVNot currently listed

Published2020-09-01

Last modified2026-06-17

Description

A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is exposed there. This issue affects: openS... .