GHSA-g2vg-8hfg-79vjMediumCVSS 5.4

Koji Cross-site Scripting

Published
December 24, 2024
Last Modified
February 7, 2025

🔗 CVE IDs covered (1)

CVE-2024-9427 →

📋 Description

A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XSS protections in the code.

🎯 Affected products3

  • pip/koji:= 1.35.0
  • pip/koji:>= 1.34.0, < 1.34.3
  • pip/koji:< 1.33.2

🔗 References (6)