Miembros de
Boletines de Vulnerabilidades |
CVE-2022-31670 |
|
| Software afectado | HARBOR |
|
Harbor fails to validate the user permissions when updating tag retention policies. By sending a request to update a tag retention policy with an id that belongs to a project that the currently authenticated user doesn’t have access to, the attacker could modify tag retention policies configured in other projects. |
|
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2022-31670 | |
