CVE-2017-1002153

High

Published: 06/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Koji version 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission.

Risk Assessment

The organization may be exposed to unauthorized build actions, potentially leading to the introduction of malicious code or other threats.

Recommendation

It is recommended to update Koji to the latest version that improves SCM path validation and to review the security policy regarding build submissions.

Other vulnerabilities in Koji 1.13.0

CVE-2026-74020High
Unauthenticated Broken Access Control vulnerability in Koji versions up to 2.2.1. An attacker without authentication can gain unauthorized access to protected functions.

Original NVD description (English source)

Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission.