Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25894
HistoryJul 16, 2020 - 5:56 a.m.

Server-Side Request Forgery (SSRF)

2020-07-1605:56:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

EPSS

0.001

Percentile

44.7%

github.com/goharbor/harbor is vulnerable to server-side request forgery (SSRF). The vulnerability exists due to a legacy endpoint to test webhook, allowing an attacker with permissions to edit projects to perform a port scan of hosts within the internal network.

EPSS

0.001

Percentile

44.7%

Related for VERACODE:25894