CVE-2018-10917
pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' u…
Published: 2018-08-15 · CVSS: 6.8 · CVSS 3.0
pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7