Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor

2021-05-1818:27:50

Google

osv.dev

0.002 Low

EPSS

Percentile

52.0%

JSON

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform.

CPENameOperatorVersion
github.com/goharbor/harborge1.7.0
github.com/goharbor/harborge1.9.0
github.com/goharbor/harborlt1.8.6
github.com/goharbor/harborlt1.9.3

Name	Operator	Version
github.com/goharbor/harbor	ge	1.7.0
github.com/goharbor/harbor	ge	1.9.0
github.com/goharbor/harbor	lt	1.8.6
github.com/goharbor/harbor	lt	1.9.3

References

github.com/goharbor/harbor/security/advisories

github.com/goharbor/harbor/security/advisories/GHSA-gcqm-v682-ccw6

nvd.nist.gov/vuln/detail/CVE-2019-19025

tanzu.vmware.com/security/cve-2019-19025

0.002 Low

EPSS

Percentile

52.0%

JSON

Related for OSV:GHSA-RFFR-C932-CPXV