Skip to content
OpenAdvisories

Package · Go

github.com/goharbor/harbor

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2019-19030 Public exploit

    Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030)

    Cloud Native Computing Foundation Harbor before 1.10.3 and 2.x before 2.0.1 allows resource enumeration because unauthenticated API calls reveal (via the HTTP status code) whether a resource exists.

    github.com/goharbor/harbor Go
  • Medium 6.5
    CVE-2019-16097 Public exploit EPSS 22%

    Missing Authorization in Harbor

    core/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via the POST /api/users API, when Harbor is setup with DB as authentication backend and allow user to do self-registration. Fixed version: v1.7.6 v1.8.3. v.1.9.0. W…

    github.com/goharbor/harbor Go