CVE-2018-12467: Opensuse Open Build Service

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.

Affected products

• Opensuse Open Build Service: before 2.9.4 (fixed in 2.9.4)

Published 2018-08-01. Last modified 2026-06-17.