What’s Vulnerable › Vulnerabilities

CVE-2017-1002153

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-10-06 · updated 2026-06-17
• Weakness: CWE-20

Description

Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission.

Affected products

• Koji Project Koji: 1.13.0

References

• https://pagure.io/koji/issue/563
• https://pagure.io/koji/issue/563

Get alerted when CVE-2017-1002153 or the next vulnerability affects your stack