CVE-2019-19026

EUVD-2021-1209
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.9 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
Affected Products (NVD)
VendorProductVersion
linuxfoundationharbor
1.7.0 ≤
𝑥
< 1.8.6
linuxfoundationharbor
1.9.0 ≤
𝑥
< 1.9.3
pivotalvmware_harbor_registry
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/goharbor/harbor/security/advisories
https://github.com/goharbor/harbor/security/advisories/GHSA-rh89-vvrg-fg64
https://tanzu.vmware.com/security/cve-2019-19026
https://github.com/goharbor/harbor/security/advisories
https://github.com/goharbor/harbor/security/advisories/GHSA-rh89-vvrg-fg64
https://tanzu.vmware.com/security/cve-2019-19026