CVE-2019-16097-batch

Disclaimer

For security research purposes only. Do not use for illegal testing. Bear all consequences yourself!!!

Batch exploit script

Add target URLs in bulk in the url.txt file

http://1.1.1.1 http://2.2.2.2

Run this script with Python. The verification results can be seen in result.txt

Vulnerability Background

Recently, an arbitrary administrator registration vulnerability was disclosed in the image registry Harbor. By crafting specific strings in requests, an attacker can directly create an administrator account without authorization, thereby taking over the Harbor image registry. Upon receiving the information, we immediately verified the vulnerability. The official announcement has been released, and the latest versions 1.7.6 and 1.8.3 have fixed this vulnerability. Users are advised to upgrade to secure versions as soon as possible.

Vulnerability Description

Harbor is an enterprise-level Registry server for storing and distributing Docker images. A security vulnerability exists in the core/api/user.go file in Harbor versions 1.7.0 through 1.8.2. By adding key parameters to the request, an attacker can exploit this vulnerability to create an administrator account and thereby take over the Harbor image registry.