Description
Harbor存在未授权访问漏洞，该漏洞是由于/api/接口对用户发送的请求验证不当导致的。
Harbor CVE-2022-46463 未授权访问漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2022-46463
https://nsfocusglobal.com/harbor-unauthorized-access-vulnerability-cve-2022-46463-alert/
https://knowledge.broadcom.com/external/article/390530/cve202246463-harbor-unauthorized-access.html
https://github.com/nu0l/CVE-2022-46463
https://access.redhat.com/security/cve/cve-2022-46463
https://vulners.com/cve/CVE-2022-46463
https://vuldb.com/vuln/218270
https://www.sentinelone.com/vulnerability-database/cve-2022-46463/
https://www.acunetix.com/vulnerabilities/web/harbor-unauthorized-access-vulnerability/