CVE-2020-13788

2020-07-1521:15:12

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.8%

JSON

Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on the Harbor server’s intranet.

CPENameOperatorVersion
harboreq1.1.1
harboreq0.4.0
harboreq1.2.0
harboreq1.4.0-rc1
harboreq1.1.0-rc3
harboreq1.1.2
harboreq0.4.1
harboreq1.1.1-rc1
harboreq2.0.1-rc1
harboreq2.0.0-rc1

Name	Operator	Version
harbor	eq	1.1.1
harbor	eq	0.4.0
harbor	eq	1.2.0
harbor	eq	1.4.0-rc1
harbor	eq	1.1.0-rc3
harbor	eq	1.1.2
harbor	eq	0.4.1
harbor	eq	1.1.1-rc1
harbor	eq	2.0.1-rc1
harbor	eq	2.0.0-rc1