Executive brief
SQL Injection in Harbor scan log API in github.com/goharbor/harbor
Affected products
- Go github.com/goharbor/harbor
Junglewise Threat Intelligence
CVE-2024-22261: GO-2024-2916 - SQL Injection in Harbor scan log API in github.com/goharbor/harbor
CVE-2024-22261 · Severity: low · CVSS 3.1 · Published 2024-06-14
Technologies: github.com/goharbor/harbor (Go). Vendors: Go.
Related threats
- GO-2026-4876 - Harbor: LDAP password and OIDC secret are not redacted in the audit log in github.com/goharbor/harbor
- GO-2026-4845 - Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor
- GO-2025-3826 - Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor
- GO-2024-3268 - Harbor fails to validate the user permissions when updating p2p preheat policies in github.com/goharbor/harbor
- GO-2022-0876 - Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor