GHSA-w4x5-jqq4-qc8x

ghsaUSosv

SQL Injection in Cloud Native Computing Foundation Harbor

view advisory published 2021-05-18Licence: CC-BY-4.0

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-19026US	medium4.9	1.42% (73rd)	—	2020-03-20
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform.

references

External citations — patches, advisories, analysis.

https://github.com/goharbor/harbor/security/advisoriesWEB
https://github.com/goharbor/harbor/security/advisories/GHSA-rh89-vvrg-fg64WEB
https://nvd.nist.gov/vuln/detail/CVE-2019-19026ADVISORY
https://tanzu.vmware.com/security/cve-2019-19026WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan