VULNERABILITY INTELLIGENCE
CVE-2018-7688
CVSS score7.1 HIGH
EPSS probability1.10%
CISA KEVNot currently listed
Published2018-06-07
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
Description
A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sources in projects where they do not have write permissions.
Weakness classification
- CWE-862: Missing Authorization