Harbor timing attack risk in github.com/goharbor/harbor
Harbor timing attack risk in github.com/goharbor/harbor
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-20902US | medium6.5 | — | ||
A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below, Harbor 2.8.2 and below, and Harbor 1.10.17 and below allows an attacker with network access to
create jobs/s… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/goharbor/harbor/blob/aaea068cceb4063ab89313d9785f2b40f35b0d63/src/jobservice/api/authenticator.go#L69-L69WEB
- https://github.com/goharbor/harbor/releases/tag/v1.10.18WEB
- https://github.com/goharbor/harbor/releases/tag/v2.7.3WEB
- https://github.com/goharbor/harbor/releases/tag/v2.8.3WEB
- https://github.com/goharbor/harbor/security/advisories/GHSA-mq6f-5xh5-hgcfADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2023-20902ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan