Skip to content
Sign in
5.3 Medium

CVE-2025-10760 A flaw has been found in Harness 3.3.0

Description

A flaw has been found in Harness 3.3.0. This impacts the function LookupRepo of the file app/api/controller/gitspace/lookup_repo.go. Executing manipulation of the argument url can lead to server-side request forgery. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products and versions

Product Affected versions Fixed in
Harness 3.3.0 No fix stated

Other CVEs of Harness

The 3 CVEs of Harness →
CVE-2026-15036 A vulnerability was determined in Harness up to 2.28.2 5.3 Medium CVE-2025-10761 A vulnerability has been found in Harness 3.3.0 6.3 Medium
Track this CVE