GitHub Advisoryadvisory · Go

GHSA-w4x5-jqq4-qc8x SQL Injection in Cloud Native Computing Foundation Harbor

MEDIUM Published 2021-05-18 Modified 2021-05-04 Official page ↗
Aliases
CVE-2019-19026
Ecosystem
Go
Packages
github.com/goharbor/harbor
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-89
Reviewed
2021-05-04

Affected packages

• Go github.com/goharbor/harbor: >= 1.7.0, < 1.8.6 → fixed in 1.8.6 • Go github.com/goharbor/harbor: >= 1.9.0, < 1.9.3 → fixed in 1.9.3

Description

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform.

Related

Alias · CVE (1)

  • CVE-2019-19026 Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container… vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References