Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform.
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform.
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform.
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform.
Harbor API has a Broken Access Control vulnerability. The vulnerability allows project administrators to use the Harbor API to create a robot account with unauthorized push and/or pull access permissions to a project they don't have access or control for. The Harbor API did not enforce the proper project permissions and project scope on the API request to create a new robot account.
End of life: 6/30/2025, Latest version: 2.11.0
End of life: 6/30/2025, Latest version: 2.11.0
End of life: 1/31/2025, Latest version: 2.10.2
End of life: 1/31/2025, Latest version: 2.10.2
End of life: 9/30/2024, Latest version: 2.9.1
End of life: 9/30/2024, Latest version: 2.9.1
End of life: 5/31/2024, Latest version: 2.8.4
End of life: 5/31/2024, Latest version: 2.8.4
End of life: 1/31/2024, Latest version: 2.7.4
End of life: 1/31/2024, Latest version: 2.7.4
End of life: 6/30/2023, Latest version: 2.6.4
End of life: 6/30/2023, Latest version: 2.6.4
End of life: 6/23/2023, Latest version: 2.5.5
End of life: 6/23/2023, Latest version: 2.5.5
End of life: 11/30/2022, Latest version: 2.4.3
End of life: 11/30/2022, Latest version: 2.4.3
End of life: 12/31/2022, Latest version: 2.3.5
End of life: 12/31/2022, Latest version: 2.3.5
End of life: 4/30/2022, Latest version: 2.2.3
End of life: 4/30/2022, Latest version: 2.2.3
End of life: 7/19/2022, Latest version: 2.1.6
End of life: 7/19/2022, Latest version: 2.1.6
End of life: 3/20/2022, Latest version: 2.0.6
End of life: 3/20/2022, Latest version: 2.0.6
End of life: 6/11/2021, Latest version: 1.10.3