CVE-2019-19029: SQL Injection
Published Mar 20, 2020
·Updated
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform.
Affected Software
5 affected componentsFixes available
go/github.com/goharbor/harbor>=1.9.0<1.9.3
1.9.3
go/github.com/goharbor/harbor>=1.7.0<1.8.6
1.8.6
linuxfoundation Harbor>=1.7.0<1.8.6
linuxfoundation Harbor>=1.9.0<1.9.3
Pivotal Vmware Harbor Registry
Event History
Mar 20, 2020
CVE Published
via MITRE·02:02 AM
Data Sourced
via MITRE·02:02 AM
Description
May 18, 2021
Advisory Published
via GitHub·06:27 PM
Frequently Asked Questions
1
What is the vulnerability ID for this Harbor vulnerability?
The vulnerability ID for this Harbor vulnerability is CVE-2019-19029.
2
What is the severity of CVE-2019-19029?
The severity of CVE-2019-19029 is high with a score of 7.2.
3
Which versions of Harbor are affected by CVE-2019-19029?
Harbor versions 1.7.0 to 1.8.6 and 1.9.0 to 1.9.3 are affected by CVE-2019-19029.
4
What is the affected software for CVE-2019-19029?
The affected software for CVE-2019-19029 is Linuxfoundation Harbor and Pivotal VMware Harbor Registry.
5
How can SQL Injection be exploited in this vulnerability?
SQL Injection can be exploited via user-groups in the VMware Harbor Container Registry for the Pivotal Platform in Harbor prior to versions 1.8.6 and 1.9.3.