medium4.3
CVE-2020-13788
Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on the Harbor server's…
Impact
Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on the Harbor server's intranet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linuxfoundation | Harbor | before 2.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/goharbor/harbor/releases
- https://www.soluble.ai/blog/harbor-ssrf-cve-2020-13788
- https://www.youtube.com/watch?v=v8Isqy4yR3Q
- https://github.com/goharbor/harbor/releases
- https://www.soluble.ai/blog/harbor-ssrf-cve-2020-13788
- https://www.youtube.com/watch?v=v8Isqy4yR3Q