Koji hub call does not perform correct access checks
Critical severity
GitHub Reviewed
Published
Jul 12, 2018
to the GitHub Advisory Database
•
Updated Feb 1, 2023
Package
Affected versions
= 1.12
= 1.13
= 1.14
= 1.15
Patched versions
1.12.1
1.13.1
1.14.1
1.15.1
Description
Published by the National Vulnerability Database
Apr 4, 2018
Published to the GitHub Advisory Database
Jul 12, 2018
Reviewed
Jun 16, 2020
Last updated
Feb 1, 2023
Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1.
References