Количество 80
Количество 80
GHSA-xx9w-464f-7h6f
Harbor fails to validate the user permissions when updating a robot account
GHSA-vw63-824v-qf2j
SQL Injection in Harbor scan log API
GHSA-r864-28pw-8682
Harbor fails to validate the user permissions when updating p2p preheat policies
GHSA-q9x4-q76f-5h5j
Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030)
GHSA-q9p8-33wc-h432
Authenticated users can exploit an enumeration vulnerability in Harbor
GHSA-q76q-q8hw-hmpw
Harbor fails to validate the user permissions when reading job execution logs through the P2P preheat execution logs
GHSA-mq6f-5xh5-hgcf
Harbor timing attack risk
GHSA-jf8p-3vjh-pq94
Harbor fails to validate the user permissions when viewing Webhook policies
GHSA-hw28-333w-qxp3
Harbor fails to validate the user permissions when updating project configurations
GHSA-9wvh-ff5f-xjpj
Missing Authorization in Harbor
GHSA-8c6p-v837-77f6
Harbor fails to validate the user permissions when updating tag immutability policies
GHSA-5c53-mg2q-8qhc
An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication.
GHSA-58rv-96r6-2cpw
The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping.
GHSA-5757-v49g-f6r7
Open Redirect URL in Harbor
GHSA-38r5-34mr-mvm7
"catalog's registry v2 api exposed on unauthenticated path in Harbor"
GHSA-3637-v6vq-xqqw
Harbor fails to validate the user permissions when updating tag retention policies
GHSA-33p6-fx42-7rf5
Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788)
CVE-2024-22278
Incorrect user permission validation in Harbor <v2.9.5 and Harbor <v2.10.3 allows authenticated users to modify configurations.
CVE-2024-22261
SQL-Injection in Harbor allows priviledge users to leak the task IDs
CVE-2024-22244
Open Redirect in Harbor <=v2.8.4, <=v2.9.2, and <=v2.10.0 may redirect a user to a malicious site.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-xx9w-464f-7h6f Harbor fails to validate the user permissions when updating a robot account | CVSS3: 6.4 | 0% Низкий | больше 3 лет назад |
| GHSA-vw63-824v-qf2j SQL Injection in Harbor scan log API | CVSS3: 2.7 | 0% Низкий | больше 1 года назад |
| GHSA-r864-28pw-8682 Harbor fails to validate the user permissions when updating p2p preheat policies | CVSS3: 7.4 | 0% Низкий | около 1 года назад |
| GHSA-q9x4-q76f-5h5j Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) | CVSS3: 5.3 | 36% Средний | почти 4 года назад |
| GHSA-q9p8-33wc-h432 Authenticated users can exploit an enumeration vulnerability in Harbor | CVSS3: 4.3 | 0% Низкий | больше 4 лет назад |
| GHSA-q76q-q8hw-hmpw Harbor fails to validate the user permissions when reading job execution logs through the P2P preheat execution logs | CVSS3: 5 | 0% Низкий | больше 3 лет назад |
| GHSA-mq6f-5xh5-hgcf Harbor timing attack risk | CVSS3: 5.9 | 0% Низкий | около 2 лет назад |
| GHSA-jf8p-3vjh-pq94 Harbor fails to validate the user permissions when viewing Webhook policies | CVSS3: 7.7 | 0% Низкий | больше 3 лет назад |
| GHSA-hw28-333w-qxp3 Harbor fails to validate the user permissions when updating project configurations | CVSS3: 5.5 | 0% Низкий | больше 1 года назад |
| GHSA-9wvh-ff5f-xjpj Missing Authorization in Harbor | CVSS3: 6.5 | 94% Критический | почти 4 года назад |
| GHSA-8c6p-v837-77f6 Harbor fails to validate the user permissions when updating tag immutability policies | CVSS3: 6.4 | 0% Низкий | больше 3 лет назад |
| GHSA-5c53-mg2q-8qhc An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication. | CVSS3: 7.5 | 73% Высокий | почти 3 года назад |
| GHSA-58rv-96r6-2cpw The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping. | CVSS3: 8.6 | 0% Низкий | больше 3 лет назад |
| GHSA-5757-v49g-f6r7 Open Redirect URL in Harbor | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
| GHSA-38r5-34mr-mvm7 "catalog's registry v2 api exposed on unauthenticated path in Harbor" | CVSS3: 5.3 | 0% Низкий | почти 4 года назад |
| GHSA-3637-v6vq-xqqw Harbor fails to validate the user permissions when updating tag retention policies | CVSS3: 7.7 | 0% Низкий | больше 3 лет назад |
| GHSA-33p6-fx42-7rf5 Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) | CVSS3: 4.4 | 0% Низкий | почти 4 года назад |
 | CVE-2024-22278 Incorrect user permission validation in Harbor <v2.9.5 and Harbor <v2.10.3 allows authenticated users to modify configurations. | CVSS3: 6.4 | 0% Низкий | больше 1 года назад |
| CVE-2024-22261 SQL-Injection in Harbor allows priviledge users to leak the task IDs | CVSS3: 2.7 | 0% Низкий | больше 1 года назад |
| CVE-2024-22244 Open Redirect in Harbor <=v2.8.4, <=v2.9.2, and <=v2.10.0 may redirect a user to a malicious site. | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу