Description
A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XSS protections in the code
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
koji
Default version status: unaffected
0 to < 1.35.1affected