CVE-2024-22261 SQL Injection in Harbor scan log API

SQL-Injection in Harbor allows priviledge users to leak the task IDs...

CVE-2024-22261

Harbor (scan log API) is affected by a SQL Injection vulnerability described across OSV-BIT-HARBOR-2024-22261 and NVD CVE-2024-22261. The issue arises in the Harbor scan log API where privileged users (administrator, project_admin, project_maintainer) can trigger arbitrary SQL execution to leak t...

CVE-2024-22244

Open Redirect in Harbor =v2.8.4, =v2.9.2, and =v2.10.0 may redirect a user to a malicious site...

CVE-2024-22244 Harbor Open Redirect URL

Open Redirect in Harbor =v2.8.4, =v2.9.2, and =v2.10.0 may redirect a user to a malicious site...

CVE-2024-22244 Harbor Open Redirect URL

Open Redirect in Harbor =v2.8.4, =v2.9.2, and =v2.10.0 may redirect a user to a malicious site...

CVE-2024-22244

CVE-2024-22244 affects Harbor open‑redirect in versions ≤ v2.8.4, ≤ v2.9.2, and ≤ v2.10.0. Connected sources describe the vulnerability as an open redirect risk, linked to insufficient validation of the redirect_url parameter in OIDC authentication flows. Core details include the affected product...

CVE-2024-22244 Harbor Open Redirect URL

Open Redirect in Harbor =v2.8.4, =v2.9.2, and =v2.10.0 may redirect a user to a malicious site...

Harbor Security Breach

Harbor is an open source registry from Harbor Open Source. Artifacts are protected through policies and role-based access control, ensuring that images are scanned and are not vulnerable, and signing images as trusted. A security vulnerability exists in Harbor v2.8.4, v2.9.2, and v2.10.0 and...

Harbor SQL Injection Vulnerability

Harbor is an open source registry from Harbor Open Source. Artifacts are protected through policies and role-based access control, ensuring that images are scanned and free of vulnerabilities, and signing images as trusted. A SQL injection vulnerability exists in Harbor v2.8.4, v2.9.2, and v2.10....

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: vault-k8s, swagger, flyte, secrets-store-csi-driver-provider-aws, kube-logging-operator, kube-oidc-proxy, prometheus-postgres-exporter, atlantis-fips, nsc, tempo, go-md2man, smarter-device-manager-fips, gosu, flux-image-reflector-controller, fulcio-fips,...

SQL Injection

github.com/goharbor/harbor is vulnerable to SQL Injection. The vulnerability is due to the improper usage of prepared statements within the ListScanTasksByReportUUID function in task.go, which allows an attacker with administrator, projectadmin, or projectmaintainer roles to execute arbitrary SQL...

Open Redirect

github.com/goharbor/harbor is vulnerable to open redirect. The vulnerability is due to a lack of validation for the redirecturl parameter with the OIDC authentication, which allows attackers to redirect users to malicious sites after login...

SUSE CVE-2020-29662

In Harbor 2.0 before 2.0.5 and 2.1.x before 2.1.2 the catalog's registry API is exposed on an unauthenticated path...

GHSA-VW63-824V-QF2J SQL Injection in Harbor scan log API

Impact A user with an administrator, projectadmin, or projectmaintainer role could utilize and exploit SQL Injection to allow the execution of any Postgres function or the extraction of sensitive information from the database through this API: GET...

SQL Injection in Harbor scan log API

Impact A user with an administrator, projectadmin, or projectmaintainer role could utilize and exploit SQL Injection to allow the execution of any Postgres function or the extraction of sensitive information from the database through this API: GET...

GHSA-5757-V49G-F6R7 Open Redirect URL in Harbor

Description Under OIDC authentication mode, there is a redirecturl parameter exposed in the URL which is used to redirect the current user to the defined location after the successful OIDC login, This redirecturl can be an ambiguous URL and can be used to embed a phishing URL. For example: if a...

PT-2024-19294

Name of the Vulnerable Software and Affected Versions Harbor versions 2.8.1 through 2.8.5 Harbor versions 2.9.0 through 2.9.3 Harbor versions 2.10.0 through 2.10.1 Description A SQL Injection issue allows users with administrator, project admin, or project maintainer roles to execute any Postgres...

PT-2024-19290 · Harbor · Harbor

Name of the Vulnerable Software and Affected Versions: Harbor versions 2.8.4 and earlier Harbor versions 2.9.2 and earlier Harbor versions 2.10.0 and earlier Description: The issue concerns an Open Redirect in Harbor under OIDC authentication mode, where a redirect url parameter in the URL can be...

learn.digitalharbor.org Cross Site Scripting vulnerability OBB-3928635

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-fips, govulncheck, vault-k8s, conftest, vault, cfssl, flyte, metacontroller, http-echo, rabbitmq-default-user-credential-updater, s5cmd, pombump, secrets-store-csi-driver-provider-aws, secrets-store-csi-driver-provider-gcp,...