Critical Vulnerability in Harbor Enables Privilege Escalation from Zero to Admin (CVE-2019-16097)
Unit 42 researcher Aviv Sasson found a critical privilege escalation flaw in the Harbor cloud native registry, CVE-2019-16097, where a POST request to /api/users with the parameter "has_admin_role" set to True creates a new admin user under default...