Skip to content
NewA calmer, faster ZeroHour
Vulnerability1

CVE-2022-31666

CVSS 3.1
5.4 medium
EPSS
<1%p41
Published
·
Modified
Analyze CVE-2022-31666 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Harbor fails to validate user permissions while deleting Webhook policies, allowing malicious users to view, update and delete Webhook policies of other users. The attacker could modify Webhook policies configured in other projects.

Vendors
linuxfoundation
Products
harbor
Weakness
CWE-285, CWE-862
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

2 stories