Medium severity6.0NVD Advisory· Published Aug 1, 2018· Updated Jun 17, 2026

CVE-2018-12467

Description

Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OpenSUSE/Build servicellm-fuzzy
Range: <2.9.4
OpenSUSE/openbuildservicecpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

bugzilla.suse.com/show_bug.cginvd
github.com/openSUSE/open-build-service/commit/f57b660f49f830006766a8d4abc3b4af6e178063nvd

News mentions

No linked articles in our index yet.

cvss	0.390
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000