What’s Vulnerable › Vulnerabilities

CVE-2018-1002150

• Severity: critical (CVSS 9.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-04-04 · updated 2026-06-17
• Weakness: CWE-732

Description

Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1.

Affected products

• Koji Project Koji: 1.12.0, 1.13.0, 1.14.0, 1.15.0

References

• https://docs.pagure.org/koji/CVE-2018-1002150/
• https://pagure.io/koji/issue/850
• https://docs.pagure.org/koji/CVE-2018-1002150/
• https://pagure.io/koji/issue/850

Get alerted when CVE-2018-1002150 or the next vulnerability affects your stack