obs-service-tar_scm (SUSE:Package Hub 15) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Package Hub 15 package obs-service-tar_scm, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2018-12474 — CVSS 5.4 (medium): Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and extract information…
• CVE-2018-12476 — CVSS 4.3 (medium): Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers…
• CVE-2018-12473 — CVSS 3.1 (low): A path traversal traversal vulnerability in obs-service-tar_scm of Open Build Service allows remote attackers to cause access files not in…