CVE-2017-17697

The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping

published December 15, 2017

CVSS
—
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01389 · 71.9th percentile
Published
2017-12-15T09:00Z
EPSS history
Timeline
  • 15 DEC 09:00Z
    The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping
    cvelistv5