Executive brief
Harbor timing attack risk in github.com/goharbor/harbor
Affected products
- Go github.com/goharbor/harbor
Junglewise Threat Intelligence
CVE-2023-20902: GO-2023-2109 - Harbor timing attack risk in github.com/goharbor/harbor
CVE-2023-20902 · Severity: low · CVSS 3.1 · Published 2024-08-21
Technologies: github.com/goharbor/harbor (Go). Vendors: Go.
Related threats
- GO-2026-4876 - Harbor: LDAP password and OIDC secret are not redacted in the audit log in github.com/goharbor/harbor
- GO-2026-4845 - Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor
- GO-2025-3826 - Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor
- GO-2024-3268 - Harbor fails to validate the user permissions when updating p2p preheat policies in github.com/goharbor/harbor
- GO-2022-0876 - Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor