Skip to content
OpenAdvisories

Vendor

goharbor

2 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 6.5

    Harbor through 2.15.2 Scanner Credential Disclosure via Query Parameter

    Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover the scanner adapter secret one character …

  • Medium 4.1

    Harbor's repository description page allows for XSS

    Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, contain a vulnerability where the markdown field in the info tab page can be exploi…