Skip to content
Sign in
6.8 Medium

CVE-2018-10917 pulp 2.16.x and possibly older is vulnerable to an improper path parsing

Description

pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories.

Affected products and versions

Product Affected versions Fixed in
pulp Versions not published

Other CVEs of pulp

The 2 CVEs of pulp →
CVE-2018-1090 In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable… 5.5 Medium
Track this CVE