Skip to content
OpenAdvisories

Package · Go

github.com/goharbor/harbor

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.4
    CVE-2022-31668

    User permission validation failure and disclosure of P2P preheat execution logs

    Harbor fails to validate the user permissions when updating p2p preheat policies. By sending a request to update a p2p preheat policy with an id that belongs to a project that the currently authenticated user doesn't have access to, the attacker could modify …

    github.com/goharbor/harbor github.com/goharbor/harbor/src Go
  • High 7.7
    CVE-2022-31670

    Harbor fails to validate the user permissions when updating tag retention policies

    Harbor fails to validate the user permissions when updating tag retention policies.  By sending a request to update a tag retention policy with an id that belongs to a project that the currently authenticated user doesn’t have access to, the attacker could mo…

    github.com/goharbor/harbor Go
  • High 7.4
    CVE-2022-31671

    Harbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logs

    Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution logs. By sending a request that attempts to read/update P2P preheat execution logs and specifying different job IDs, malicious authenticat…

    github.com/goharbor/harbor Go
  • High 7.7
    CVE-2022-31666

    Harbor fails to validate user permissions while Viewing, updating and deleting Webhook policies

    Harbor fails to validate user permissions while deleting Webhook policies, allowing malicious users to view, update and delete Webhook policies of other users.  The attacker could modify Webhook policies configured in other projects.

    github.com/goharbor/harbor Go
  • High 7.2
    CVE-2019-19029

    SQL Injection in Cloud Native Computing Foundation Harbor

    Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform.

    github.com/goharbor/harbor Go
  • High 7.6
    CVE-2019-19025

    Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor

    Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform.

    github.com/goharbor/harbor Go