CVE-2022-45155: obs-service-go_modules: arbitrary directory delete

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-45155.

Q: What is the affected software for this vulnerability?

The affected software for this vulnerability is SUSE openSUSE Factory obs-service-go_modules version up to and excluding 0.6.1.

Q: What is the severity of CVE-2022-45155?

The severity of CVE-2022-45155 is medium.

Q: How can an attacker exploit this vulnerability?

An attacker that can influence the call to the obs-service-go_modules service can exploit this vulnerability to delete files and directories on the victim's system.

Q: Is there a fix available for CVE-2022-45155?

Yes, updating to a version higher than 0.6.1 of SUSE openSUSE Factory obs-service-go_modules resolves this vulnerability.

Published Mar 15, 2023

Updated

An Improper Handling of Exceptional Conditions vulnerability in obs-service-gomodules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-service-gomodules versions prior to 0.6.1.

Affected Software

1 affected component

SUSE openSUSE Factory<0.6.1

Event History

Mar 15, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-45155.

What is the affected software for this vulnerability?

The affected software for this vulnerability is SUSE openSUSE Factory obs-service-go_modules version up to and excluding 0.6.1.

What is the severity of CVE-2022-45155?

The severity of CVE-2022-45155 is medium.

How can an attacker exploit this vulnerability?

An attacker that can influence the call to the obs-service-go_modules service can exploit this vulnerability to delete files and directories on the victim's system.

Is there a fix available for CVE-2022-45155?