CVE-2017-1002153

Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission.

Score

CVSS 3.1 7.5 High

Status

Modified - patrick@puiterwijk.org

Published

2017-10-06

Last modified

2024-09-16

Weaknesses

CWE-20

Affected products

• Koji (Koji Project)

References

• https://pagure.io/koji/issue/563