VULNERABILITY INTELLIGENCE
CVE-2024-22033
CVSS score6.3 MEDIUM
EPSS probability0.94%
CISA KEVNot currently listed
Published2024-10-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
The OBS service obs-service-download_url was vulnerable to a command injection vulnerability. The attacker could provide a configuration to the service that allowed to execute command in later steps
Weakness classification
- meissner@suse.de: CWE-78