tocsin

Go/github.com/goharbor/harbor CVE-2022-31668: unknown, EPSS 0.30%

Harbor fails to validate the user permissions when updating p2p preheat policies in github.com/goharbor/harbor

Action: Upgrade github.com/goharbor/harbor to 2.4.3+incompatible or later.

go get github.com/goharbor/harbor@v2.4.3+incompatible
go get github.com/goharbor/harbor@v2.5.2+incompatible

Affected

introducedfixedlast affected
2.0.0+incompatible2.4.3+incompatible-
2.5.0+incompatible2.5.2+incompatible-

Fixed versions

2.4.3+incompatible2.5.2+incompatible

Sources

CVE-2022-31668 · published · modified · JSON