Information Disclosure

2022-02-1412:31:49

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

github

goharbor

harbor

information disclosure

enumeration vulnerability

chart_repository.go

unauthenticated access

api

resource enumeration

EPSS

0.001

Percentile

33.5%

JSON

github.com/goharbor/harbor is vulnerable to information disclosure. The vulnerability exists due to enumeration vulnerability in the chart_repository.go file, allowing an unauthenticated attacker to gain access to Harbor API and enumerate resources in the system.