CVE-2017-1002153

EPSS 1.1%CWE-20

Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission.

Affected products

Want to know if your infrastructure is exposed to this?

References