Approved changes feed: RSS · Atom
cpe:2.3:a:linuxfoundation:harbor:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Linuxfoundation (4b459c90-8cdb-5268-beb4-b69b5fe74234) |
|---|---|
| Product | Harbor (cc16a6af-6249-542a-ac2a-de55f0d96a33) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/goharbor/harbor |
purl2cpe | 2026-06-01 10:13:21.350688 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-22278 |
vulnerable | 2026-06-08 06:29:34.409410 |
Harbor fails to validate the user permissions when updating project configurations
MEDIUM (6.4)
Incorrect user permission validation in Harbor <v2.9.5 and Harbor <v2.10.3 allows authenticated users to modify configurations.
Published: 2024-08-02T00:59:55.313Z
Updated: 2024-08-14T21:35:37.751Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22261 |
vulnerable | 2026-06-08 06:29:34.316497 |
SQL Injection in Harbor scan log API
LOW (2.7)
SQL-Injection in Harbor allows priviledge users to leak the task IDs
Published: 2024-06-10T23:25:32.158Z
Updated: 2024-08-01T22:43:34.096Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22244 |
vulnerable | 2026-06-08 06:29:34.207576 |
Harbor Open Redirect URL
MEDIUM (4.3)
Open Redirect in Harbor <=v2.8.4, <=v2.9.2, and <=v2.10.0 may redirect a user to a malicious site.
Published: 2024-06-10T23:02:59.347Z
Updated: 2024-08-01T22:43:33.635Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-20902 |
vulnerable | 2026-06-08 05:54:18.135054 |
Timing attack risk in Harbor
MEDIUM (5.9)
A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below, Harbor 2.8.2 and below, and Harbor 1.10.17 and below allows an attacker with network access to
create jobs/stop job tasks and retrieve job task information.
Published: 2023-11-09T00:36:25.369Z
Updated: 2024-09-04T13:18:17.730Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46463 |
vulnerable | 2026-06-08 05:50:38.931790 |
Details available
An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication. NOTE: the vendor's position is that this "is clearly described in the documentation as a feature."
Published: 2023-01-12T00:00:00.000Z
Updated: 2025-04-08T14:07:27.661Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31671 |
vulnerable | 2026-06-08 05:43:43.396319 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31670 |
vulnerable | 2026-06-08 05:43:43.395962 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31669 |
vulnerable | 2026-06-08 05:43:43.395598 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31668 |
vulnerable | 2026-06-08 05:43:43.395282 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31667 |
vulnerable | 2026-06-08 05:43:43.394878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31666 |
vulnerable | 2026-06-08 05:43:43.394289 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-29662 |
vulnerable | 2026-06-08 05:24:58.707412 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13794 |
vulnerable | 2026-06-08 05:18:01.098309 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13788 |
vulnerable | 2026-06-08 05:18:01.091496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3990 |
vulnerable | 2026-06-08 05:13:56.601628 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19030 |
vulnerable | 2026-06-08 05:13:21.333577 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19029 |
vulnerable | 2026-06-08 05:13:21.333103 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19026 |
vulnerable | 2026-06-08 05:13:21.332654 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19025 |
vulnerable | 2026-06-08 05:13:21.332040 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19023 |
vulnerable | 2026-06-08 05:13:21.330649 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16919 |
vulnerable | 2026-06-08 05:13:09.580934 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17697 |
vulnerable | 2026-06-08 05:09:09.758102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.