harness(gitness) registry webhook sort_order blind SQL injection
Harness open-source Gitness has a blind SQL injection in the registry webhook sort_order parameter.
Khashayar Fereidani disclosed a blind SQL injection in the sort_order parameter used when listing registry webhooks in Harness open source (Gitness). Gitness is a self-hosted platform for source control, pipelines, and artifact registries. The affected call is the registry API endpoint that lists a registry's webhooks. No CVE or in-the-wild exploitation is stated.
56