Vulnerabilities > Opensuse > OBS Service Source Validator

DATE CVE VULNERABILITY TITLE RISK
2018-03-01 CVE-2017-9274 OS Command Injection vulnerability in Opensuse Obs-Service-Source Validator
A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.
local
low complexity
opensuse CWE-78
7.8