theLSA/harbor-give-me-admin

PoC

harbor(<1.7.6/1.8.3) privilege escalation (CVE-2019-16097)

view exploit source poc_in_githubauthor theLSApublished 2019-10-02catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-16097US	medium6.5OT elevated	22.4% (98th)	Exploit	2019-09-08
core/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via the POST /api/users API, when Harbor is setup with DB as authentication backend a…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.