CyberRota Analysis
AI-GeneratedHarness versions up to 2.28.2 are vulnerable to an authorization bypass in the gitspaces endpoint, specifically within the getAuthorizedSpaces function. This flaw allows remote attackers to manipulate requests and gain unauthorized access to sensitive resources. Organizations using affected versions should prioritize patching to mitigate potential exploitation, especially if they handle sensitive data or rely on the affected functionality.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in Harness up to 2.28.2. This vulnerability affects the function getAuthorizedSpaces of the file app/api/controller/gitspace/list_all.go of the component gitspaces Endpoint. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.