CVE-2018-12473 path traversal in obs-service-tar_scm

Low 3.1 Published 2 Oct 2018 Updated 16 Sep 2024

Remote attackers can access files outside the current build directory in Open Build Service, though server confinement mitigates direct host access.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2018-12473?

CVE-2018-12473 is a low-severity path traversal vulnerability in openSUSE Open Build Service, published on 2 Oct 2018. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A path traversal traversal vulnerability in obs-service-tar_scm of Open Build Service allows remote attackers to cause access files not in the current build. On the server itself this is prevented by confining the worker via KVM. Affected releases are openSUSE Open Build Service: versions prior to 70d1aa4cc4d7b940180553a63805c22fc62e2cf0.

Weakness: CWE-22, CWE-23

Which versions are affected by CVE-2018-12473?

It affects 1 product.

Products include Opensuse Open Build Service.

How do I fix CVE-2018-12473?

Apply the vendor's patch.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2018-12473 being exploited?

There is no known exploitation of CVE-2018-12473 in the wild and no public exploit code.

Sources

Also known as GHSA-46f9-xh5g-7wf2.