Skip to content
OpenAdvisories

Package · Ubuntu

koji

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-9427

    Koji: escape html tag characters in the query string

    A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XS…

    koji koji Ubuntu PyPI
  • Medium 6.5
    CVE-2019-17109

    koji hub allows arbitrary upload destinations

    Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation.

    koji koji Ubuntu PyPI