Skip to content
OpenAdvisories
High · 7.6 CVE-2019-19025 EUVD-2021-1178GHSA-gcqm-v682-ccw6GHSA-rffr-c932-cpxvGO-2022-0876

Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor

Published Mar 20, 2020 · Updated Aug 5, 2024 · Assigned by mitre

Package: github.com/goharbor/harbor Ecosystem: Go

Description

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/goharbor/harbor >= 1.7.0, < 1.8.6 1.8.6 GHSA-rffr-c932-cpxv
Go github.com/goharbor/harbor >= 1.9.0, < 1.9.3 1.9.3 GHSA-rffr-c932-cpxv
Go github.com/goharbor/harbor >= 1.7.0, < 1.8.6 · >= 1.9.0, < 1.9.3 1.8.6, 1.9.3 GO-2022-0876

References