Identifying a BOLA Vulnerability in Harbor, a Cloud-Native Container Registry
Unit 42 researchers identified a broken object-level authorization (BOLA) vulnerability, tracked as CVE-2024-22278 with a CVSS score of 6.4, affecting Harbor container registry versions prior to 2.9.5. The flaw lets a user with a Maintainer role create,...