The following table lists the changes that have been made to the
CVE-2025-32019 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.
-
New CVE Received
by [email protected]Jul. 23, 2025
Action Type Old Value New Value Added Description Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed in versions 2.11.3 and 2.12.3. Added CVSS V3.1 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N Added CWE CWE-79 Added Reference https://github.com/goharbor/harbor/commit/76c2c5f7cfd9edb356cbb373889a59cc3217a058 Added Reference https://github.com/goharbor/harbor/commit/a13a16383a41a8e20f524593cb290dc52f86f088 Added Reference https://github.com/goharbor/harbor/commit/f019430872118852f83f96cac9c587b89052d1e5 Added Reference https://github.com/goharbor/harbor/security/advisories/GHSA-f9vc-vf3r-pqqq