{"id":"CVE-2011-4183","aliases":["EUVD-2011-4126","GHSA-rqg5-w7gw-xqvq","UBUNTU-CVE-2011-4183"],"status":"published","title":"open build service allows anyone to upload rpms","description":"A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.0155,"percentile":0.7523,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-434","CWE-862"],"published":"2018-06-13T13:00:00Z","modified":"2026-06-16T23:34:33Z","products":[{"vendor":"opensuse","product":"open_build_service"},{"vendor":"suse","product":"open build service"}],"references":[{"url":"https://github.com/openSUSE/open-build-service/commit/5281e4bff9df31f1f91e22a0d1e9086b93b23d7e","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=736243","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4183"},{"url":"https://github.com/advisories/GHSA-rqg5-w7gw-xqvq"},{"url":"https://ubuntu.com/security/CVE-2011-4183","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4183","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2011-4183","title":"open build service allows anyone to upload rpms","description":"A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16.","status":"published","published":"2018-06-13T13:00:00Z","modified":"2024-09-17T00:11:18.418Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:35:37.989579Z"}],"euvd":[{"id":"EUVD-2011-4126","description":"A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16.","status":"published","published":"2018-06-13T13:00:00Z","modified":"2024-09-17T00:11:18Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T00:29:01.573177Z"}],"ghsa":[{"id":"GHSA-rqg5-w7gw-xqvq","title":"A vulnerability in open build service allows remote attackers to upload arbitrary RPM files....","description":"A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16.","status":"published","published":"2022-05-13T01:39:26Z","modified":"2023-02-02T05:00:27Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:50:57.606497Z"}],"nvd":[{"id":"CVE-2011-4183","description":"A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16.","status":"published","published":"2018-06-13T13:29:00.28Z","modified":"2026-06-16T23:34:33.16Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-862","CWE-434"],"updated_at":"2026-11-02T14:02:12.945371Z"}],"osv":[{"id":"UBUNTU-CVE-2011-4183","description":"A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16.","status":"withdrawn","published":"2018-06-13T13:29:00Z","modified":"2025-07-16T08:10:31.731863Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:06.395274Z"}]}}