Executive brief
Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor
Affected products
- Go github.com/goharbor/harbor
Junglewise Threat Intelligence
CVE-2020-13788: GO-2022-0781 - Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) in github.com/goharbor/harbor
CVE-2020-13788 · Severity: low · CVSS 3.1 · Published 2024-08-21
Technologies: github.com/goharbor/harbor (Go). Vendors: Go.
Related threats
- GO-2026-4876 - Harbor: LDAP password and OIDC secret are not redacted in the audit log in github.com/goharbor/harbor
- GO-2026-4845 - Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor
- GO-2025-3826 - Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor
- GO-2024-3268 - Harbor fails to validate the user permissions when updating p2p preheat policies in github.com/goharbor/harbor
- GO-2022-0876 - Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor