high8.6
CVE-2017-17697
The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping.
Impact
The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linuxfoundation | Harbor | before 1.3.0 Version 1.3.0 |