Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-10760

Date: September 20, 2025

A flaw has been found in Harness 3.3.0. This impacts the function LookupRepo of the file app/api/controller/gitspace/lookup_repo.go. Executing manipulation of the argument url can lead to server-side request forgery. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity Score

Related Resources (7)

https://nvd.nist.gov/vuln/detail/CVE-2025-10760
https://vuldb.com/?id.325115
https://github.com/August829/Yu/blob/main/58ead8e7e08bfb019.md#poc
https://vuldb.com/?ctiid.325115
https://github.com/August829/Yu/blob/main/58ead8e7e08bfb019.md
https://vuldb.com/?submit.646843
https://www.mend.io/vulnerability-database/CVE-2025-10760

Severity Score

Weakness Type (CWE)

Server-Side Request Forgery (SSRF)

CWE-918

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): NONE

Do you need more information?

Contact Us