harbor vulnerabilities (Bitnami)
16 vulnerabilities.
-
harborBitnami Use of hard coded credentials in GoHarbor Harbor 9.4 Critical -
harborBitnami Harbor's repository description page allows for XSS 4.1 Medium -
harborBitnami User permission validation failure and disclosure of P2P preheat execution logs 7.4 High -
harborBitnami Harbor fails to validate the user permissions when updating project configurations 6.4 Medium -
harborBitnami SQL Injection in Harbor scan log API 2.7 Low -
harborBitnami Harbor Open Redirect URL 4.3 Medium -
harborBitnami Timing attack risk in Harbor 5.9 Medium -
harborBitnami An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private... 7.5 High -
harborBitnami Harbor fails to validate the user permissions when updating a robot account 6.4 Medium -
harborBitnami Harbor fails to validate the user permissions when updating tag immutability policies 6.4 Medium -
harborBitnami Harbor fails to validate user permissions while Viewing, updating and deleting Webhook policies 7.7 High -
harborBitnami Harbor fails to validate the user permissions when updating tag retention policies 7.7 High -
harborBitnami Harbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logs 7.4 High -
harborBitnami "catalog's registry v2 api exposed on unauthenticated path in Harbor" 5.3 Medium -
harborBitnami Authenticated users can exploit an enumeration vulnerability in Harbor 4.3 Medium -
harborBitnami Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) 4.3 Medium