Описание
Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1.
Ссылки
- MitigationThird Party Advisory
- Third Party Advisory
- MitigationThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:koji_project:koji:1.12.0:*:*:*:*:*:*:*
cpe:2.3:a:koji_project:koji:1.13.0:*:*:*:*:*:*:*
cpe:2.3:a:koji_project:koji:1.14.0:*:*:*:*:*:*:*
cpe:2.3:a:koji_project:koji:1.15.0:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00302
Низкий
9.1 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-732
Связанные уязвимости
CVSS3: 9.1
ubuntu
почти 8 лет назад
Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1.
CVSS3: 9.1
debian
почти 8 лет назад
Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access con ...
CVSS3: 9.1
github
больше 7 лет назад
Koji hub call does not perform correct access checks
EPSS
Процентиль: 53%
0.00302
Низкий
9.1 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-732