Miembros de
Boletines de Vulnerabilidades |
CVE-2022-31669 |
|
| Software afectado | HARBOR |
|
Harbor fails to validate the user permissions when updating tag immutability policies. By sending a request to update a tag immutability policy with an id that belongs to a project that the currently authenticated user doesn’t have access to, the attacker could modify tag immutability policies configured in other projects. |
|
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2022-31669 | |
