CVE-2019-17109
MEDIUMkoji < 1.18.0 - Path Traversal and Privilege Escalation
Title source: llmDescription
Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation.
References (6)
Core 6
Core References
Mailing List, Third Party Advisory x_refsource_misc
http://www.openwall.com/lists/oss-security/2019/10/09/5
Vendor Advisory x_refsource_confirm
https://docs.pagure.org/koji/CVE-2019-17109/
Vendor Advisory x_refsource_confirm
https://pagure.io/koji/commits/master
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7PSCCFHLNVFLDPC7DB4UJGXD6ZWBSY57/
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4BGUXMZIAQFFNNQ7PEFDAYQCXXKJR76U/
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DEQYYGWLJBQQVTAC7E7XSDGVF27NPMPB/
Scores
CVSS v3
6.5
EPSS
0.0279
EPSS Percentile
84.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Details
CWE
CWE-22
Status
published
Products (2)
koji_project/koji
< 1.18.0
pypi/koji
1.14.0 - 1.14.3PyPI
Published
Oct 09, 2019
Tracked Since
Feb 18, 2026