CVE-2025-32019 – Harbor Cross-Site Scripting (XSS) Vulnerability

The following table lists the changes that have been made to the
CVE-2025-32019 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Jul. 23, 2025

    Action Type Old Value New Value
    Added Description Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed in versions 2.11.3 and 2.12.3.
    Added CVSS V3.1 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
    Added CWE CWE-79
    Added Reference https://github.com/goharbor/harbor/commit/76c2c5f7cfd9edb356cbb373889a59cc3217a058
    Added Reference https://github.com/goharbor/harbor/commit/a13a16383a41a8e20f524593cb290dc52f86f088
    Added Reference https://github.com/goharbor/harbor/commit/f019430872118852f83f96cac9c587b89052d1e5
    Added Reference https://github.com/goharbor/harbor/security/advisories/GHSA-f9vc-vf3r-pqqq
Share the Post:

Related Posts