Harbor vulnerabilities

5 vulnerabilities

Known vulnerabilities in Harbor products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.

Products

2
6.4CVE-2024-22278github.com/goharborharbor+2
EPSS score
0.36%
Incorrect user permission validation in Harbor <v2.9.5 and Harbor <v2.10.3 allows authenticated users to modify configurations.5.5CVE-2024-22261github.com/goharborharbor+2
EPSS score
0.42%
SQL-Injection in Harbor allows priviledge users to leak the task IDs6.1CVE-2024-22244github.com/goharborharbor+2
EPSS score
0.36%
Open Redirect in Harbor  <=v2.8.4, <=v2.9.2, and <=v2.10.0 may redirect a user to a malicious site.9.4CVE-2026-4404github.com/goharborharbor+2
EPSS score
0.60%
Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.6.5CVE-2023-20902github.com/goharborharbor+2
EPSS score
0.45%
A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below,  Harbor 2.8.2 and below, and Harbor 1.10.17 and below allows an attacker with network access to create jobs/stop job tasks and retrieve job task information.