medium4.9
CVE-2019-19026
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivot…
Impact
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linuxfoundation | Harbor | from 1.7.0 before 1.8.6 from 1.9.0 before 1.9.3 |
| Pivotal | Vmware Harbor Registry | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/goharbor/harbor/security/advisories
- https://github.com/goharbor/harbor/security/advisories/GHSA-rh89-vvrg-fg64
- https://tanzu.vmware.com/security/cve-2019-19026
- https://github.com/goharbor/harbor/security/advisories
- https://github.com/goharbor/harbor/security/advisories/GHSA-rh89-vvrg-fg64
- https://tanzu.vmware.com/security/cve-2019-19026