Harbor repository description page has Cross-site Scripting vulnerability

보통 4.1CVE-2025-32019 · BIT-harbor-2025-32019 · GHSA-f9vc-vf3r-pqqq · Published 23/07/2025 · updated 17/06/2026

요약

CVE-2025-32019은(는) github.com/goharbor/harbor에 영향을 주는 보통 (CVSS 4.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.37%, 전체 취약점의 30.6%보다 높음.
조치: 2.12.4-rc1, 2.12.4-rc1+incompatible, 2.13.1-rc1, 2.13.1-rc1+incompatible 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
github.com/goharbor/harbor Go	`≥ 2.12.0-rc1, < 2.12.4-rc1≥ 2.12.0-rc1+incompatible, < 2.12.4-rc1+incompatible≥ 2.13.0-rc1, < 2.13.1-rc1≥ 2.13.0-rc1+incompatible, < 2.13.1-rc1+incompatible≥ 2.4.0-rc1.1, ≤ 2.11.2< 2.4.0-rc1.0.20250421072404-a13a16383a41all versions`	`2.12.4-rc12.12.4-rc1+incompatible2.13.1-rc12.13.1-rc1+incompatible2.4.0-rc1.0.20250421072404-a13a16383a41`

Description

Impact

In the Harbor repository information, it is possible to inject code resulting in a stored XSS issue.

Patches

Harbor v2.12.3 Harbor 2.11.3

Workarounds

References

Credit

[email protected]

NVD description

Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed in versions 2.11.3 and 2.12.3.

References

goharbor/harbor security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2025-32019 · ADVISORY
goharbor/harbor commit 76c2c5f · WEB
goharbor/harbor commit a13a163 · WEB
goharbor/harbor commit f019430 · WEB
goharbor/harbor · PACKAGE

github.com/goharbor/harbor의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

요약

CVE-2025-32019은(는) github.com/goharbor/harbor에 영향을 주는 보통 (CVSS 4.1) 취약점입니다.

향후 30일 내 악용 확률(EPSS): 0.37%, 전체 취약점의 30.6%보다 높음.

조치: 2.12.4-rc1, 2.12.4-rc1+incompatible, 2.13.1-rc1, 2.13.1-rc1+incompatible 이상으로 업데이트하세요.

Package

Affected versions

Patched versions

github.com/goharbor/harbor

≥ 2.12.0-rc1, < 2.12.4-rc1≥ 2.12.0-rc1+incompatible, < 2.12.4-rc1+incompatible≥ 2.13.0-rc1, < 2.13.1-rc1≥ 2.13.0-rc1+incompatible, < 2.13.1-rc1+incompatible≥ 2.4.0-rc1.1, ≤ 2.11.2< 2.4.0-rc1.0.20250421072404-a13a16383a41all versions

2.12.4-rc12.12.4-rc1+incompatible2.13.1-rc12.13.1-rc1+incompatible2.4.0-rc1.0.20250421072404-a13a16383a41

Description

Impact

In the Harbor repository information, it is possible to inject code resulting in a stored XSS issue.

Patches

Harbor v2.12.3 Harbor 2.11.3

Workarounds

References

Credit

[email protected]

NVD description

github.com/goharbor/harbor의 다른 취약점

모두 보기 →