Harbor's repository description page allows for XSS
Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0 and 2.13.0, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed in versions 2.11.3 and 2.12.3.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-32019US | — | — | ||
Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, cont… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/goharbor/harbor/commit/76c2c5f7cfd9edb356cbb373889a59cc3217a058WEB
- https://github.com/goharbor/harbor/commit/a13a16383a41a8e20f524593cb290dc52f86f088WEB
- https://github.com/goharbor/harbor/commit/f019430872118852f83f96cac9c587b89052d1e5WEB
- https://github.com/goharbor/harbor/security/advisories/GHSA-f9vc-vf3r-pqqqWEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-32019WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan