CVE-2022-46463 PoC — Harbor 访问控制错误漏洞

Source

https://github.com/nu0l/CVE-2022-46463

Associated Vulnerability

Title:Harbor 访问控制错误漏洞 (CVE-2022-46463)
Description:An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication. NOTE: the vendor's position is that this "is clearly described in the documentation as a feature."

Description

CVE-2022-46463(Harbor 未授权)

Readme

# CVE-2022-46463
[CVE-2022-46463(POC)](https://nvd.nist.gov/vuln/detail/CVE-2022-46463)
Harbor 未授权

漏洞详情可见[Stack社区](https://mp.weixin.qq.com/s/V8Ecqq_DPOQhH5q9UBWkXg)

### Use 
```
python3 cvve-2022-46463.py -u https://127.0.0.1:5003
python3 cve-2022-46463.py -f file.txt
```

### Options
```
  -u URL, --url URL     Target URL (e.g. http://example.com)
  -f FILE, --file FILE  Select a target list url file (e.g. file.txt)
  -h, --help            Show help message and exit
```

<img width="1345" alt="image" src="https://user-images.githubusercontent.com/54735907/212932785-2a9ff90e-5a6e-4569-b371-c806ee4a913e.png">
<img width="1341" alt="image" src="https://user-images.githubusercontent.com/54735907/212932937-1ba996d8-17b2-4ad0-9733-630d2392a0a9.png">

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!