Skip to content
OpenAdvisories

Vendor

Harbor

6 known vulnerabilities.

Products

Harbor 5 Project 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-22278

    Harbor fails to validate the user permissions when updating project configurations

    Incorrect user permission validation in Harbor <v2.9.5 and Harbor <v2.10.3 allows authenticated users to modify configurations.

    Harbor Harbor github.com/goharbor/harbor Go
  • Medium 4.3
    CVE-2024-22244

    Harbor Open Redirect URL

    Open Redirect in Harbor  <=v2.8.4, <=v2.9.2, and <=v2.10.0 may redirect a user to a malicious site.

    Harbor Harbor github.com/goharbor/harbor Go
  • Medium 5.9
    CVE-2023-20902

    Timing attack risk in Harbor

    A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below,  Harbor 2.8.2 and below, and Harbor 1.10.17 and below allows an attacker with network access to create jobs/stop job tasks and retrieve job task information.

    Harbor Project github.com/goharbor/harbor Go