Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-22244 BIT-harbor-2024-22244EUVD-2024-1926GHSA-5757-v49g-f6r7GO-2024-2915

Harbor Open Redirect URL

Published Jun 10, 2024 · Updated Aug 1, 2024 · Assigned by vmware

Vendor: Harbor Product: Harbor Package: github.com/goharbor/harbor Ecosystem: Go

Description

Open Redirect in Harbor  <=v2.8.4, <=v2.9.2, and <=v2.10.0 may redirect a user to a malicious site.

Affected products

VendorProductAffectedFixed
Harbor Harbor 2.8 – ≤ 2.8.4, 2.10 – ≤ 2.10.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/goharbor/harbor < 2.8.5 2.8.5 GHSA-5757-v49g-f6r7
Go github.com/goharbor/harbor >= 2.9.0, < 2.9.3 2.9.3 GHSA-5757-v49g-f6r7
Go github.com/goharbor/harbor >= 2.10.0, < 2.10.1 2.10.1 GHSA-5757-v49g-f6r7
Go github.com/goharbor/harbor < 2.8.5+incompatible · >= 2.9.0+incompatible, < 2.9.3+incompatible · >= 2.10.0+incompatible, < 2.10.1+incompatible 2.8.5+incompatible, 2.9.3+incompatible, 2.10.1+incompatible GO-2024-2915

Advisories 1

References