CVE-2025-30086 | CNCF Harbor up to 2.12.3/2.13.0 /api/v2.0/users q information disclosure (GHSA-h27m-3qw8-3pw8)

July 25, 2025 Yanac

A vulnerability classified as problematic was found in CNCF Harbor up to 2.12.3/2.13.0. This vulnerability affects unknown code of the file /api/v2.0/users. The manipulation of the argument q leads to information disclosure.

This vulnerability was named CVE-2025-30086. The attack can only be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More