CVE-2025-58158

{
  "id": "CVE-2025-58158",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-29T18:15:42.987",
  "lastModified": "2026-10-19T17:10:00.173",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries. Prior to version 3.3.0, Open Source Harness git LFS server (Gitness) exposes api to retrieve and upload files via git LFS. Implementation of upload git LFS file api is vulnerable to arbitrary file write. Due to improper sanitization for upload path, a malicious authenticated user who has access to Harness Gitness server api can use a crafted upload request to write arbitrary file to any location on file system, may even compromise the server. Users using git LFS are vulnerable. This issue has been patched in version 3.3.0."
    },
    {
      "lang": "es",
      "value": "Harness Open Source es una plataforma de desarrollo de extremo a extremo con Gestión de Control de Código Fuente, Pipelines CI/CD, Entornos de Desarrollo Alojados y Registros de Artefactos. Antes de la versión 3.3.0, el servidor git LFS de Harness Open Source (Gitness) expone una API para recuperar y cargar archivos a través de git LFS. La implementación de la API de carga de archivos git LFS es vulnerable a la escritura arbitraria de archivos. Debido a la sanitización inadecuada de la ruta de carga, un usuario autenticado malicioso que tiene acceso a la API del servidor Harness Gitness puede usar una solicitud de carga manipulada para escribir un archivo arbitrario en cualquier ubicación del sistema de archivos, incluso podría comprometer el servidor. Los usuarios que utilizan git LFS son vulnerables. Este problema ha sido parcheado en la versión 3.3.0."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "harness",
          "product": "harness",
          "versions": [
            {
              "version": "< 3.3.0",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-08-29T18:07:33.237579Z",
          "id": "CVE-2025-58158",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        },
        {
          "lang": "en",
          "value": "CWE-73"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/harness/harness/commit/21c5ce42ae13740b1cad47706c2ec85e72cc8c20",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/harness/harness/security/advisories/GHSA-w469-hj2f-jpr5",
      "source": "[email protected]"
    }
  ]
}