Opensuse Osc vulnerabilities

2 CVEs affecting Opensuse Osc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-3681, published 2020-06-29.

More from Opensuse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-3681, published 2020-06-29. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise…
• CVE-2012-1095, published 2014-02-06. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a…