Skip to content
OpenAdvisories
Low · 2.7 CVE-2024-22261 BIT-harbor-2024-22261EUVD-2024-2184GHSA-vw63-824v-qf2jGO-2024-2916

SQL Injection in Harbor scan log API

Published Jun 10, 2024 · Updated Aug 1, 2024 · Assigned by vmware

Vendor: Harbor Product: Harbor Package: github.com/goharbor/harbor Ecosystem: Go

Description

SQL-Injection in Harbor allows priviledge users to leak the task IDs

Affected products

VendorProductAffectedFixed
Harbor Harbor 2.8.1 – ≤ 2.8.5, 2.9.0 – ≤ 2.9.3, 2.10.0 – ≤ 2.10.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/goharbor/harbor < 2.8.6 2.8.6 GHSA-vw63-824v-qf2j
Go github.com/goharbor/harbor >= 2.9.0, < 2.9.4 2.9.4 GHSA-vw63-824v-qf2j
Go github.com/goharbor/harbor >= 2.10.0, < 2.10.2 2.10.2 GHSA-vw63-824v-qf2j
Go github.com/goharbor/harbor < 2.8.6+incompatible · >= 2.9.0+incompatible, < 2.9.4+incompatible · >= 2.10.0+incompatible, < 2.10.2+incompatible 2.8.6+incompatible, 2.9.4+incompatible, 2.10.2+incompatible GO-2024-2916

Advisories 1

References