Filter
AND
Versions
HarborCloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnera…
8.8
First published (updated )
go/github.com/goharbor/harborHarbor fails to validate the user permissions when updating tag retention policies
7.7
First published (updated )
go/github.com/goharbor/harborHarbor fails to validate the user permissions when updating tag immutability policies
7.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
go/github.com/goharbor/harborUser permission validation failure and disclosure of P2P preheat execution logs
7.7
First published (updated )
HarborHarbor API has a Broken Access Control vulnerability. The vulnerability allows project administrator…
7.5
First published (updated )
HarborAn access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private ima…
7.5
First published (updated )
go/github.com/goharbor/harborHarbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logs
7.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Harborcore/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via t…
6.5
First published (updated )
go/github.com/goharbor/harborHarbor fails to validate the user permissions when updating project configurations
6.4
First published (updated )
go/github.com/goharbor/harborHarbor fails to validate the user permissions when updating a robot account
6.4
First published (updated )
HarborIn Harbor 2.0 before 2.0.5 and 2.1.x before 2.1.2 the catalog’s registry API is exposed on an unauth…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
HarborCloud Native Computing Foundation Harbor before 1.10.3 and 2.x before 2.0.1 allows resource enumerat…
5.3
First published (updated )
go/github.com/goharbor/harborHarbor 1.9.* 1.10.* and 2.0.* allows Exposure of Sensitive Information to an Unauthorized Actor.
4.3
First published (updated )
HarborA User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This en…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.