harness(gitness) registry webhook sort_order blind SQL injection

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-27 04:14 UTC
Importiert: 2026-10-01 06:47 UTC
Quelle-ID: full_disc
uid_hash: 8009a515d7953adc47bddd888605a3bda61a1d268b7d0e71625106e88cbcc2f2

Full Disclosure

Posted by Khashayar Fereidani on Sep 26

Author: Khashayar Fereidani

Disclosure Date: 2026-09-24

Advisory: https://fereidani.com/harness-registry-webhook-sortorder-blind-sql-injection

Contact: https://fereidani.com/contact

Harness open source (Gitness) is a self-hosted platform for source control,

pipelines and artifact registries. The registry API lists the webhooks of a

registry at `GET...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss