PT-2019-14949

Name of the Vulnerable Software and Affected Versions Koji versions 1.14.0 through 1.18.0 Description The issue allows remote Directory Traversal, resulting in Privilege Escalation. It is caused by the way the hub code validates upload paths, enabling an attacker to choose an arbitrary destinatio...