CVE-2022-31667

creationtimestamp| type| source ---|---|--- 2024-11-14 11:53:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113481166368149680 2024-11-14 14:08:51+00:00| seen| https://t.me/cvedetector/10939...

CVE-2022-31667 Harbor fails to validate the user permissions when updating a robot account

Harbor fails to validate the user permissions when updating a robot account that belongs to a project that the authenticated user doesn’t have access to. By sending a request that attempts to update a robot account, and specifying a robot account id and robot account name that belongs to a...