Lucene search
Veracode Vulnerability DatabaseVERACODE:5552HistoryDec 11, 2017 - 5:22 a.m.
Server Side Request Forgery (SSRF)
2017-12-1105:22:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.006 Low
EPSS
Percentile
78.4%
github.com/vmware/harbor is vulnerable to server side request forgery (SSRF) attacks. A malicious user can pass a malicious request to the application to the ping() function in the /src/ui/api/target.go file, leading to information disclosure or arbitrary command execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/vmware/harbor | eq | HEAD | |
| github.com/vmware/harbor | le | 1.3.0 |
References
Related
cve
cve
CVE-2017-17697
2017-12-15 09:29:00
cvelist
cvelist
CVE-2017-17697
2017-12-15 09:00:00
nvd
nvd
CVE-2017-17697
2017-12-15 09:29:00
prion
prion
Server side request forgery (ssrf)
2017-12-15 09:29:00
osv
osv
CVE-2017-17697
2017-12-15 09:29:00