CVE-2022-31669 | BDVDB-2026-255103 Detail

Description#

Harbor fails to validate the user permissions when updating tag immutability policies.  By sending a request to update a tag immutability policy with an id that belongs to a project that the currently authenticated user doesn’t have access to, the attacker could modify tag immutability policies configured in other projects.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-11-14Record published in the CVE List.
2. Version 22024-11-15Most recent update recorded in the CVE List.