UBUNTU-CVE-2026-18376
[Unknown description]
PatchFirst · Свежие уязвимости
За последние 30 дней в koji опубликовано уязвимостей: 1; в каталоге KEV: 0.
Уязвимостей: 6
[Unknown description]
A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XSS protections in the code
Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation.
SQL injection in multiple remote calls
Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1.
Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.