CVE-2017-17697

The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping.

Score

CVSS 3.1 8.6 High

Status

Modified - cve@mitre.org

Published

2017-12-15

Last modified

2024-08-05

Weaknesses

CWE-918

Affected products

• Harbor (Linuxfoundation)

References

• https://github.com/vmware/harbor/issues/3755