harbor

Team Introduction Chongqing Jiugongge Security Team is committed to sharing open-source security tools, with research directions covering red-blue confrontation, Web security, mobile security, security development, enterprise security construction, IoT/Industrial Control Security/AI/Quantum...

CVE-2022-46463

CVE-2022-46463 CVE-2022-46463POC Harbor Unauthorized For vulnerability details, see Stack Community Use root@kitploit: python3 cvve-2022-46463.py -u https://127.0.0.1:5003 Options root@kitploit: -u URL, --url URL Target URL e.g. http://example.com -h, --help Show help message and exit Directly...

Harbor <=2.5.3 - Unauthorized Access

An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication id: CVE-2022-46463 info: name: Harbor =2.5.3 - Unauthorized Access author: Arm!tage severity: high description: | An access control issue in Harbor v1.X.X to...

CVE-2022-46463

creationtimestamp| type| source ---|---|--- 2023-01-18 06:02:47+00:00| seen| https://t.me/proxybar/1301 2023-01-19 00:11:07+00:00| published-proof-of-concept| Telegram/0NZCYVlx7ylV75kO7UU3TIiJIkgGwrPNwLxvKLb7GodpuQ 2023-01-19 00:11:25+00:00| published-proof-of-concept|...

CVE-2022-46463

An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication. NOTE: the vendor's position is that this "is clearly described in the documentation as a feature."...

CVE-2022-46463

CVE-2022-46463 describes an access-control issue in Harbor where Harbor v1.X.X through v2.5.3 allows access to both public and private image repositories without authentication. The vulnerability is described consistently across NVD/OSV/Nuclei sources as an unauthorized access flaw (CWE-306) with...

CVE-2022-46463

An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication. NOTE: the vendor's position is that this "is clearly described in the documentation as a feature."...