CVE-2017-17697

2017-12-1509:29:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.4%

JSON

The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping.

CPENameOperatorVersion
harboreq1.1.0-rc1
harboreq0.5.0
harboreq1.1.1-rc4
harboreq1.1.1-rc1
harboreq1.1.0-rc2
harboreq0.3.5-rc
harboreq0.4.1
harboreq1.2.0-rc2
harboreq1.1.1
harboreq1.2.0

Name	Operator	Version
harbor	eq	1.1.0-rc1
harbor	eq	0.5.0
harbor	eq	1.1.1-rc4
harbor	eq	1.1.1-rc1
harbor	eq	1.1.0-rc2
harbor	eq	0.3.5-rc
harbor	eq	0.4.1
harbor	eq	1.2.0-rc2
harbor	eq	1.1.1
harbor	eq	1.2.0