CVE-2025-10760

A flaw has been found in Harness 3.3.0. This impacts the function LookupRepo of the file app/api/controller/gitspace/lookuprepo.go. Executing manipulation of the argument url can lead to server-side request forgery. The attack may be launched remotely. The exploit has been published and may be...

Harness 代码问题漏洞

Harness is a development platform open-sourced by Harness. A code issue vulnerability exists in Harness version 3.3.0, which stems from the incorrect manipulation of the parameter url by the LookupRepo function in the file app/api/controller/gitspace/lookuprepo.go, which could lead to server-side...