tocsin

CVE-2022-31668

3 advisories.

Go/github.com/goharbor/harbor CVE-2022-31668: high 7.4, EPSS 0.30%

Harbor fails to validate the user permissions when updating p2p preheat policies

Action: Upgrade github.com/goharbor/harbor to 2.4.3 or later.

go get github.com/goharbor/harbor@v2.4.3
go get github.com/goharbor/harbor@v2.5.2

Affected

introducedfixedlast affected
2.0.02.4.3-
2.5.02.5.2-

Fixed versions

2.4.32.5.2

Sources

CVE-2022-31668 · published · modified · JSON

Go/github.com/goharbor/harbor/src CVE-2022-31668: high 7.4, EPSS 0.30%

Harbor fails to validate the user permissions when updating p2p preheat policies

Action: Upgrade github.com/goharbor/harbor/src to 0.0.0-20220630175814-b4ef1db or later.

go get github.com/goharbor/harbor/src@v0.0.0-20220630175814-b4ef1db

Affected

introducedfixedlast affected
0--

Fixed versions

0.0.0-20220630175814-b4ef1db

Sources

CVE-2022-31668 · published · modified · JSON

Go/github.com/goharbor/harbor CVE-2022-31668: unknown, EPSS 0.30%

Harbor fails to validate the user permissions when updating p2p preheat policies in github.com/goharbor/harbor

Action: Upgrade github.com/goharbor/harbor to 2.4.3+incompatible or later.

go get github.com/goharbor/harbor@v2.4.3+incompatible
go get github.com/goharbor/harbor@v2.5.2+incompatible

Affected

introducedfixedlast affected
2.0.0+incompatible2.4.3+incompatible-
2.5.0+incompatible2.5.2+incompatible-

Fixed versions

2.4.3+incompatible2.5.2+incompatible

Sources

CVE-2022-31668 · published · modified · JSON