Advisories · Technology
harness.
Every CVE that names harness among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Harness through 3.3.0 Missing Access Control via infraproviders endpoint
- harness
- Broken access control
- CVSS 5.3 Medium
Harness gitspaces Endpoint list_all.go getAuthorizedSpaces authorization
- Harness
- Broken access control
- CVSS 6.3 Medium
Harness Login Endpoint login excessive authentication
- Harness
- Authentication bypass
- CWE-799
- CVSS 5.3 Medium
Harness lookup_repo.go LookupRepo server-side request forgery
- Harness
- Server-side request forgery (SSRF)