CVE-2019-16097 PoC — Harbor 权限许可和访问控制问题漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/workflows/harbor-workflow.yaml

Associated Vulnerability

Title:Harbor 权限许可和访问控制问题漏洞 (CVE-2019-16097)
Description:Harbor是一款开源的可信云本机注册表。该产品主要用于存储、签名和扫描容器映像以查找漏洞。 Harbor 1.7.0版本至1.8.2版本中的core/api/user.go文件存在权限许可和访问控制问题漏洞。攻击者可利用该漏洞创建admin账户。

Description

A simple workflow that runs all Harbor related nuclei templates on a given target.

File Snapshot


 id: harbor-workflow

info:
  name: Harbor Security Checks
  author: pikpikcu
  description: A simple

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!