Skip to content
OpenAdvisories

Package · Ubuntu

koji

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 5.4
    CVE-2024-9427

    Koji: escape html tag characters in the query string

    A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XS…

    koji koji Ubuntu PyPI
  • Medium 6.5
    CVE-2019-17109

    koji hub allows arbitrary upload destinations

    Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation.

    koji koji Ubuntu PyPI
  • Critical 9.1
    CVE-2018-1002150

    Koji hub call does not perform correct access checks

    Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1.

    koji koji Ubuntu PyPI
  • High 7.5
    CVE-2017-1002153

    Koji blacklisted paths workaround

    Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission.

    Koji Project Koji koji koji Ubuntu PyPI