ldap

Dec 11, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Nov 19, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Oct 16, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Sep 7, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Sep 4, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Aug 23, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Aug 15, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Oct 17, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Sep 12, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Jul 18, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Jul 18, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

May 22, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

May 2, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Changes in this version

type Auth

+ func (l *Auth) OnBoardGroup(u *models.UserGroup, altGroupName string) error

+ func (l *Auth) SearchGroup(groupKey string) (*models.UserGroup, error)

May 2, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

May 1, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Apr 25, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Apr 20, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Apr 16, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

May 10, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Feb 6, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Changes in this version

+ type Auth struct

+ func (l *Auth) Authenticate(m models.AuthModel) (*models.User, error)

+ func (l *Auth) OnBoardUser(u *models.User) error

+ func (l *Auth) PostAuthenticate(u *models.User) error

+ func (l *Auth) SearchUser(username string) (*models.User, error)

Feb 2, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

Jan 23, 2018 GO-2022-0785 +5 more

  GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

  GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

  GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

  GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

  GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

  GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor