5
CVSSv2

CVE-2017-17697

Published: 15/12/2017 Updated: 01/04/2020
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 8.6 | Impact Score: 4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

The Ping() function in ui/api/target.go in Harbor up to and including 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping.

Vulnerable Product Search on Vulmon Subscribe to Product

linuxfoundation harbor 1.3.0

linuxfoundation harbor