Design/Logic Flaw

2017-10-0617:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

32.0%

Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission.

CPENameOperatorVersion
kojieq1.13.0

CPE	Name	Operator	Version
	koji	eq	1.13.0

References

pagure.io/koji/issue/563

0.001 Low

EPSS

Percentile

32.0%

Related for PRION:CVE-2017-1002153