CVE-2017-1002153

HIGH7.5EPSS 0.20%

Koji blacklisted paths workaround

Published: 5/13/2022Modified: 11/22/2024

Description

Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References (4)