PT-2025-38655
CVE-2025-10760
·
Published
2025-09-21
·
Updated
2026-10-19
Description by
CVSS 2.0
6.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Harness version 3.3.0
Description
A flaw exists in Harness that impacts the
LookupRepo function within the app/api/controller/gitspace/lookup repo.go file. Manipulation of the url argument can lead to server-side request forgery, potentially allowing remote exploitation. The exploit has been published.Recommendations
As a temporary workaround, consider restricting or disabling the
LookupRepo function until a patch is available.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾