CVE-2022-31666
Harbor fails to validate user permissions while Viewing, updating and deleting Webhook policies
概要
Harbor fails to validate user permissions while Viewing, updating and deleting Webhook policies
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Harbor fails to validate user permissions while deleting Webhook policies, allowing malicious users to view, update and delete Webhook policies of other users. The attacker could modify Webhook policies configured in other projects.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
harbor
[{"type":"SEMVER","events":[{"introduced":"2.0.0"},{"fixed":"2.4.3"},{"introduced":"2.5.0"},{"fixed":"2.5.2"}]}]
参照URL
- advisory github.com
- web nvd.nist.gov