CVE-2015-0778: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a _service file.

Affected products

• Fedoraproject Fedora: version 20 only; version 21 only; version 22 only
• Opensuse Opensuse: version 13.1 only; version 13.2 only
• Suse Opensuse Osc: up to and including 0.150

Published 2015-03-16. Last modified 2026-06-17.