742 matches found
Harbor 授权问题漏洞
Harbor is an open source registry from Harbor Open Source. Artifacts are protected through policy and role-based access control, ensuring that images are scanned and free of vulnerabilities, and signing images as trusted. An authorization issue vulnerability exists in Harbor 2.4.2 and prior...
Harbor 授权问题漏洞
Harbor is an open source registry from Harbor Open Source. Artifacts are protected through policies and role-based access control to ensure that images are scanned and are not vulnerable, and that images are signed as trusted. Harbor suffers from an authorization issue vulnerability that stems fr...
Harbor 授权问题漏洞
Harbor is an open source registry from Harbor Open Source. Artifacts are protected through policy and role-based access control, ensuring that images are scanned and free of vulnerabilities, and signing images as trusted. An authorization issue vulnerability exists in Harbor versions 2.4.2 and...
CVE-2022-31670: Improper Authorization
Harbor fails to validate the user permissions when updating tag retention policies. By sending a request to update a tag retention policy with an id that belongs to a project that the currently authenticated user doesn’t have access to, the attacker could modify tag retention policies configured...
CVE-2022-31671: Improper Authorization
Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution logs. By sending a request that attempts to read/update P2P preheat execution logs and specifying different job IDs, malicious authenticated users could read all the job logs...
CVE-2022-31666: Improper Authorization
Harbor fails to validate user permissions while deleting Webhook policies, allowing malicious users to view, update and delete Webhook policies of other users. The attacker could modify Webhook policies configured in other projects...
CVE-2022-31669: Improper Authorization
Harbor fails to validate the user permissions when updating tag immutability policies. By sending a request to update a tag immutability policy with an id that belongs to a project that the currently authenticated user doesn’t have access to, the attacker could modify tag immutability policies...
CVE-2022-31667: Improper Authorization
Harbor fails to validate the user permissions when updating a robot account that belongs to a project that the authenticated user doesn’t have access to. By sending a request that attempts to update a robot account, and specifying a robot account id and robot account name that belongs to a...
PT-2024-11562 · Harbor · Harbor
Name of the Vulnerable Software and Affected Versions: Harbor affected versions not specified Description: The issue arises from Harbor's failure to validate user permissions when updating p2p preheat policies. An attacker can modify p2p preheat policies in other projects by sending a request to...
Harbor 授权问题漏洞
Harbor is an open source registry from Harbor Open Source. Artifacts are protected through policies and role-based access control, ensuring that images are scanned and are not vulnerable, and signing images as trusted. Harbor suffers from an authorization issue vulnerability that stems from not...
CVE-2022-31668: Improper Authorization
Harbor fails to validate the user permissions when updating p2p preheat policies. By sending a request to update a p2p preheat policy with an id that belongs to a project that the currently authenticated user doesn't have access to, the attacker could modify p2p preheat policies configured in oth...
CVE-2024-51419
Cross Site Scripting vulnerability in Shenzhen Interconnection Harbor Network Technology Co., Ltd Ofweek Online Exhibition v.1.0.0 allows a remote attacker to execute arbitrary code...
Harbor OFweek Online Exhibition 安全漏洞
Harbor OFweek Online Exhibition is an online exhibition program from Harbor China. A security vulnerability exists in Harbor OFweek Online Exhibition version v.1.0.0. A remote attacker can exploit the vulnerability to execute arbitrary code...
CVE-2024-51419
Cross Site Scripting vulnerability in Shenzhen Interconnection Harbor Network Technology Co., Ltd Ofweek Online Exhibition v.1.0.0 allows a remote attacker to execute arbitrary code...
PT-2024-10152 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 15.2 through 17.4.6 GitLab versions 17.5 through 17.5.4 GitLab versions 17.6 through 17.6.2 Description: The issue is related to a problem in GitLab that allows for a Cross-Site Request Forgery CSRF attack. This can be exploit...
GO-2022-0876 Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor
Cross-site Request Forgery CSRF in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor...
GO-2022-0863 Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor
Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor...
GO-2022-0883 SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor
SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor...
GO-2022-0865 Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor
Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor...