GHSA-f9vc-vf3r-pqqqMediumCVSS 4.1

Harbor repository description page has Cross-site Scripting vulnerability

Published
July 23, 2025
Last Modified
July 23, 2025

🔗 CVE IDs covered (1)

CVE-2025-32019 →

📋 Description

Impact

In the Harbor repository information, it is possible to inject code resulting in a stored XSS issue.

Patches

Harbor v2.12.3 Harbor 2.11.3

Workarounds

No

References

Credit

[email protected]

🎯 Affected products4

  • go/github.com/goharbor/harbor:>= 2.12.0-rc1, < 2.12.4-rc1
  • go/github.com/goharbor/harbor:>= 2.13.0-rc1, < 2.13.1-rc1
  • go/github.com/goharbor/harbor:>= 2.4.0-rc1.1, <= 2.11.2
  • go/github.com/goharbor/harbor:< 2.4.0-rc1.0.20250421072404-a13a16383a41

🔗 References (6)